Attachment 306934 Details for Bug 448527 – audit.log

audit.log

audit.log (text/plain), 160.96 KB, created by Victor Bogado on 2008-05-28 13:43:26 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Victor Bogado

Created: 2008-05-28 13:43:26 UTC

Size: 160.96 KB

patch

obsolete

>type=CRED_ACQ msg=audit(1211886061.434:918): user pid=15029 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211886061.435:919): login pid=15029 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=145
>type=USER_START msg=audit(1211886061.441:920): user pid=15029 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1211886061.480:921): user pid=15029 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1211886061.480:922): user pid=15029 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=SELINUX_ERR msg=audit(1211886618.661:923): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211886618.661:923): arch=c000003e syscall=59 success=no exit=-13 a0=240e360 a1=240f880 a2=240fdc0 a3=8 items=0 ppid=15063 pid=15064 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211887355.108:924): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211887355.108:924): arch=c000003e syscall=59 success=no exit=-13 a0=10e4360 a1=10e5920 a2=10e5e60 a3=8 items=0 ppid=15096 pid=15097 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211887968.739:925): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211887968.739:925): arch=c000003e syscall=59 success=no exit=-13 a0=1812360 a1=18138a0 a2=1813dc0 a3=8 items=0 ppid=15123 pid=15124 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1211889601.515:926): user pid=15185 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211889601.517:927): user pid=15185 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211889601.518:928): login pid=15185 uid=0 old auid=4294967295 new auid=1001 old ses=4294967295 new ses=146
>type=USER_START msg=audit(1211889601.524:929): user pid=15185 uid=0 auid=1001 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1211889601.550:930): user pid=15187 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211889601.551:931): user pid=15187 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211889601.552:932): login pid=15187 uid=0 old auid=4294967295 new auid=1000 old ses=4294967295 new ses=147
>type=USER_START msg=audit(1211889601.558:933): user pid=15187 uid=0 auid=1000 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1211889661.583:934): user pid=15196 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211889661.585:935): user pid=15196 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211889661.586:936): login pid=15196 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=148
>type=USER_START msg=audit(1211889661.591:937): user pid=15196 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1211889661.626:938): user pid=15196 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1211889661.627:939): user pid=15196 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=SELINUX_ERR msg=audit(1211890217.845:940): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211890217.845:940): arch=c000003e syscall=59 success=no exit=-13 a0=218f360 a1=21908a0 a2=2190dc0 a3=8 items=0 ppid=15232 pid=15233 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211890344.067:941): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211890344.067:941): arch=c000003e syscall=59 success=no exit=-13 a0=2194360 a1=2195880 a2=2195dc0 a3=8 items=0 ppid=15242 pid=15243 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211893189.661:942): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211893189.661:942): arch=c000003e syscall=59 success=no exit=-13 a0=17fb360 a1=17fc8a0 a2=17fcdc0 a3=8 items=0 ppid=15422 pid=15423 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1211893201.660:943): user pid=15424 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211893201.662:944): user pid=15424 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211893201.664:945): login pid=15424 uid=0 old auid=4294967295 new auid=1001 old ses=4294967295 new ses=149
>type=USER_START msg=audit(1211893201.668:946): user pid=15424 uid=0 auid=1001 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1211893201.696:947): user pid=15426 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211893201.698:948): user pid=15426 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211893201.699:949): login pid=15426 uid=0 old auid=4294967295 new auid=1000 old ses=4294967295 new ses=150
>type=USER_START msg=audit(1211893201.706:950): user pid=15426 uid=0 auid=1000 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1211893261.731:951): user pid=15434 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211893261.733:952): user pid=15434 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211893261.734:953): login pid=15434 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=151
>type=USER_START msg=audit(1211893261.740:954): user pid=15434 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1211893261.776:955): user pid=15434 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1211893261.776:956): user pid=15434 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=SELINUX_ERR msg=audit(1211894063.171:957): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211894063.171:957): arch=c000003e syscall=59 success=no exit=-13 a0=1fec360 a1=1fee6a0 a2=1fedd90 a3=8 items=0 ppid=15608 pid=15609 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211894436.705:958): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211894436.705:958): arch=c000003e syscall=59 success=no exit=-13 a0=ce4360 a1=ce58a0 a2=ce5dc0 a3=8 items=0 ppid=15624 pid=15625 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211894807.181:959): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211894807.181:959): arch=c000003e syscall=59 success=no exit=-13 a0=6a8360 a1=6a9880 a2=6a9dc0 a3=8 items=0 ppid=15652 pid=15653 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_LOGIN msg=audit(1211894917.232:960): user pid=15658 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="bogado": exe="/usr/sbin/sshd" (hostname=?, addr=139.82.86.2, terminal=sshd res=failed)'
>type=USER_ACCT msg=audit(1211894917.368:961): user pid=15658 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bogado" exe="/usr/sbin/sshd" (hostname=139.82.86.2, addr=139.82.86.2, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1211894917.440:962): user pid=15658 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bogado" exe="/usr/sbin/sshd" (hostname=139.82.86.2, addr=139.82.86.2, terminal=ssh res=success)'
>type=LOGIN msg=audit(1211894917.443:963): login pid=15658 uid=0 old auid=4294967295 new auid=1000 old ses=4294967295 new ses=152
>type=USER_START msg=audit(1211894917.444:964): user pid=15658 uid=0 auid=1000 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="bogado" exe="/usr/sbin/sshd" (hostname=139.82.86.2, addr=139.82.86.2, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1211894917.448:965): user pid=15662 uid=0 auid=1000 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bogado" exe="/usr/sbin/sshd" (hostname=139.82.86.2, addr=139.82.86.2, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1211894917.531:966): user pid=15658 uid=0 auid=1000 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/sshd" (hostname=139.82.86.2, addr=139.82.86.2, terminal=/dev/pts/1 res=success)'
>type=SELINUX_ERR msg=audit(1211895304.216:967): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211895304.216:967): arch=c000003e syscall=59 success=no exit=-13 a0=17b1360 a1=17b28c0 a2=17b2c60 a3=8 items=0 ppid=15738 pid=15739 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211895549.824:968): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211895549.824:968): arch=c000003e syscall=59 success=no exit=-13 a0=187e360 a1=187f8a0 a2=187fdc0 a3=8 items=0 ppid=15754 pid=15755 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211895676.152:969): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211895676.152:969): arch=c000003e syscall=59 success=no exit=-13 a0=1d38360 a1=1d398a0 a2=1d39dc0 a3=8 items=0 ppid=15763 pid=15764 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211896413.298:970): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211896413.298:970): arch=c000003e syscall=59 success=no exit=-13 a0=1778360 a1=17775d0 a2=1779d90 a3=8 items=0 ppid=15803 pid=15804 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1211896801.819:971): user pid=15819 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211896801.822:972): user pid=15819 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211896801.823:973): login pid=15819 uid=0 old auid=4294967295 new auid=1001 old ses=4294967295 new ses=153
>type=USER_ACCT msg=audit(1211896801.825:974): user pid=15821 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211896801.827:975): user pid=15821 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211896801.828:976): login pid=15821 uid=0 old auid=4294967295 new auid=1000 old ses=4294967295 new ses=154
>type=USER_START msg=audit(1211896801.830:977): user pid=15819 uid=0 auid=1001 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1211896801.841:978): user pid=15821 uid=0 auid=1000 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1211896861.882:979): user pid=15830 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211896861.884:980): user pid=15830 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211896861.885:981): login pid=15830 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=155
>type=USER_START msg=audit(1211896861.891:982): user pid=15830 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1211896861.929:983): user pid=15830 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1211896861.929:984): user pid=15830 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=SELINUX_ERR msg=audit(1211897174.198:985): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211897174.198:985): arch=c000003e syscall=59 success=no exit=-13 a0=154a360 a1=154c690 a2=154d130 a3=8 items=0 ppid=15862 pid=15863 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211897422.143:986): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211897422.143:986): arch=c000003e syscall=59 success=no exit=-13 a0=1466360 a1=1467880 a2=1467dc0 a3=8 items=0 ppid=15875 pid=15876 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211897546.464:987): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211897546.464:987): arch=c000003e syscall=59 success=no exit=-13 a0=1532360 a1=15338a0 a2=1533dc0 a3=8 items=0 ppid=15884 pid=15885 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211898287.245:988): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211898287.245:988): arch=c000003e syscall=59 success=no exit=-13 a0=222b360 a1=222c8c0 a2=222cc60 a3=8 items=0 ppid=15916 pid=15917 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211898534.990:989): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211898534.990:989): arch=c000003e syscall=59 success=no exit=-13 a0=1f1c360 a1=1f1e6a0 a2=1f1dd90 a3=8 items=0 ppid=15930 pid=15931 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211899031.905:990): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211899031.905:990): arch=c000003e syscall=59 success=no exit=-13 a0=2312360 a1=23138a0 a2=2313dc0 a3=8 items=0 ppid=15951 pid=15952 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211899780.401:991): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211899780.401:991): arch=c000003e syscall=59 success=no exit=-13 a0=768360 a1=769880 a2=769dc0 a3=8 items=0 ppid=15978 pid=15979 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211900398.482:992): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211900398.482:992): arch=c000003e syscall=59 success=no exit=-13 a0=11e7360 a1=11e88a0 a2=11e8dc0 a3=8 items=0 ppid=16013 pid=16014 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1211900401.962:993): user pid=16015 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211900401.965:994): user pid=16015 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211900401.966:995): login pid=16015 uid=0 old auid=4294967295 new auid=1001 old ses=4294967295 new ses=156
>type=USER_START msg=audit(1211900401.972:996): user pid=16015 uid=0 auid=1001 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1211900402.008:997): user pid=16017 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211900402.010:998): user pid=16017 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211900402.011:999): login pid=16017 uid=0 old auid=4294967295 new auid=1000 old ses=4294967295 new ses=157
>type=USER_START msg=audit(1211900402.018:1000): user pid=16017 uid=0 auid=1000 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1211900461.044:1001): user pid=16025 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211900461.046:1002): user pid=16025 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211900461.047:1003): login pid=16025 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=158
>type=USER_START msg=audit(1211900461.054:1004): user pid=16025 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1211900461.090:1005): user pid=16025 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1211900461.090:1006): user pid=16025 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1211900567.699:1007): user pid=16093 uid=1000 auid=1000 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1211900567.705:1008): user pid=16093 uid=1000 auid=1000 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1211900567.714:1009): user pid=16093 uid=1000 auid=1000 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1211900567.715:1010): user pid=16093 uid=1000 auid=1000 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=MAC_STATUS msg=audit(1211900569.244:1011): enforcing=0 old_enforcing=1 auid=1000 ses=152
>type=USER_AVC msg=audit(1211900569.245:1012): user pid=2240 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  received setenforce notice (enforcing=0) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=SYSCALL msg=audit(1211900569.244:1011): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff394e5a90 a2=1 a3=8101010101010100 items=0 ppid=16098 pid=16156 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts3 ses=152 comm="setenforce" exe="/usr/sbin/setenforce" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1211900624.548:1013): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=AVC msg=audit(1211900624.548:1013): avc:  denied  { append } for  pid=16217 comm="spamc" path="/home/bogado/procmail.log" dev=dm-3 ino=331807 scontext=system_u:system_r:spamc_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=AVC msg=audit(1211900624.548:1013): avc:  denied  { read } for  pid=16217 comm="spamc" path="/var/spool/mqueue/dfm4RF3iE6016213" dev=sda1 ino=2253242 scontext=system_u:system_r:spamc_t:s0 tcontext=system_u:object_r:mqueue_spool_t:s0 tclass=file
>type=SYSCALL msg=audit(1211900624.548:1013): arch=c000003e syscall=59 success=yes exit=0 a0=24fb360 a1=24fd610 a2=24fd1a0 a3=8 items=0 ppid=16216 pid=16217 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) ses=4294967295 comm="spamc" exe="/usr/bin/spamc" subj=system_u:system_r:spamc_t:s0 key=(null)
>type=MAC_STATUS msg=audit(1211900763.420:1014): enforcing=1 old_enforcing=0 auid=1000 ses=152
>type=USER_AVC msg=audit(1211900763.428:1015): user pid=2240 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  received setenforce notice (enforcing=1) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=SYSCALL msg=audit(1211900763.420:1014): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffc025a800 a2=1 a3=8101010101010100 items=0 ppid=16098 pid=16226 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts3 ses=152 comm="setenforce" exe="/usr/sbin/setenforce" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1211901368.755:1016): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211901368.755:1016): arch=c000003e syscall=59 success=no exit=-13 a0=1a37360 a1=1a39460 a2=1a3a130 a3=8 items=0 ppid=16251 pid=16252 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211901370.915:1017): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211901370.915:1017): arch=c000003e syscall=59 success=no exit=-13 a0=6fc360 a1=6fe6a0 a2=6fdd90 a3=8 items=0 ppid=16255 pid=16256 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211901496.393:1018): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211901496.393:1018): arch=c000003e syscall=59 success=no exit=-13 a0=201f360 a1=2021640 a2=2022200 a3=8 items=0 ppid=16264 pid=16265 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211902365.034:1019): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211902365.034:1019): arch=c000003e syscall=59 success=no exit=-13 a0=22ab360 a1=22ac8c0 a2=22acc60 a3=8 items=0 ppid=16304 pid=16305 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=CRED_DISP msg=audit(1211902447.956:1020): user pid=8970 uid=0 auid=1000 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bogado" exe="/usr/sbin/sshd" (hostname=139.82.86.2, addr=139.82.86.2, terminal=ssh res=success)'
>type=USER_END msg=audit(1211902447.959:1021): user pid=8970 uid=0 auid=1000 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="bogado" exe="/usr/sbin/sshd" (hostname=139.82.86.2, addr=139.82.86.2, terminal=ssh res=success)'
>type=SELINUX_ERR msg=audit(1211902490.485:1022): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211902490.485:1022): arch=c000003e syscall=59 success=no exit=-13 a0=165b360 a1=165c8a0 a2=165cdc0 a3=8 items=0 ppid=16313 pid=16314 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211902984.852:1023): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211902984.852:1023): arch=c000003e syscall=59 success=no exit=-13 a0=abd360 a1=abe8a0 a2=abedc0 a3=8 items=0 ppid=16337 pid=16338 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211903615.292:1024): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211903615.292:1024): arch=c000003e syscall=59 success=no exit=-13 a0=1c98360 a1=1c9a670 a2=1c9b4d0 a3=8 items=0 ppid=16370 pid=16371 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1211904001.125:1025): user pid=16385 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211904001.129:1026): user pid=16385 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211904001.130:1027): login pid=16385 uid=0 old auid=4294967295 new auid=1001 old ses=4294967295 new ses=159
>type=USER_START msg=audit(1211904001.136:1028): user pid=16385 uid=0 auid=1001 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1211904001.166:1029): user pid=16387 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211904001.168:1030): user pid=16387 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211904001.169:1031): login pid=16387 uid=0 old auid=4294967295 new auid=1000 old ses=4294967295 new ses=160
>type=USER_START msg=audit(1211904001.176:1032): user pid=16387 uid=0 auid=1000 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1211904061.202:1033): user pid=16396 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211904061.204:1034): user pid=16396 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211904061.205:1035): login pid=16396 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=161
>type=USER_START msg=audit(1211904061.211:1036): user pid=16396 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1211904061.248:1037): user pid=16396 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1211904061.248:1038): user pid=16396 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=SELINUX_ERR msg=audit(1211905267.441:1039): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211905267.441:1039): arch=c000003e syscall=59 success=no exit=-13 a0=1daf360 a1=1db08c0 a2=1db0c60 a3=8 items=0 ppid=16446 pid=16447 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211906029.829:1040): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211906029.829:1040): arch=c000003e syscall=59 success=no exit=-13 a0=196d360 a1=196f670 a2=1970450 a3=8 items=0 ppid=16478 pid=16479 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1211907601.281:1041): user pid=16542 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211907601.284:1042): user pid=16542 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211907601.285:1043): login pid=16542 uid=0 old auid=4294967295 new auid=1001 old ses=4294967295 new ses=162
>type=USER_START msg=audit(1211907601.292:1044): user pid=16542 uid=0 auid=1001 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1211907601.318:1045): user pid=16544 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211907601.320:1046): user pid=16544 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211907601.324:1047): login pid=16544 uid=0 old auid=4294967295 new auid=1000 old ses=4294967295 new ses=163
>type=USER_START msg=audit(1211907601.330:1048): user pid=16544 uid=0 auid=1000 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1211907661.356:1049): user pid=16553 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211907661.359:1050): user pid=16553 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211907661.360:1051): login pid=16553 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=164
>type=USER_START msg=audit(1211907661.366:1052): user pid=16553 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1211907661.404:1053): user pid=16553 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1211907661.405:1054): user pid=16553 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=SELINUX_ERR msg=audit(1211910145.156:1055): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211910145.156:1055): arch=c000003e syscall=59 success=no exit=-13 a0=6ec360 a1=6eb5d0 a2=6ef220 a3=8 items=0 ppid=16658 pid=16659 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211910650.536:1056): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211910650.536:1056): arch=c000003e syscall=59 success=no exit=-13 a0=1079360 a1=107b650 a2=107c430 a3=8 items=0 ppid=16678 pid=16679 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211910652.604:1057): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211910652.604:1057): arch=c000003e syscall=59 success=no exit=-13 a0=1ad5360 a1=1ad68a0 a2=1ad6dc0 a3=8 items=0 ppid=16682 pid=16683 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1211911201.446:1058): user pid=16711 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211911201.450:1059): user pid=16711 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211911201.451:1060): login pid=16711 uid=0 old auid=4294967295 new auid=1001 old ses=4294967295 new ses=165
>type=USER_ACCT msg=audit(1211911201.452:1061): user pid=16713 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211911201.454:1062): user pid=16713 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211911201.455:1063): login pid=16713 uid=0 old auid=4294967295 new auid=1000 old ses=4294967295 new ses=166
>type=USER_START msg=audit(1211911201.458:1064): user pid=16711 uid=0 auid=1001 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1211911201.465:1065): user pid=16713 uid=0 auid=1000 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1211911261.513:1066): user pid=16722 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211911261.515:1067): user pid=16722 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211911261.517:1068): login pid=16722 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=167
>type=USER_START msg=audit(1211911261.522:1069): user pid=16722 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1211911261.559:1070): user pid=16722 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1211911261.559:1071): user pid=16722 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=SELINUX_ERR msg=audit(1211911461.033:1072): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211911461.033:1072): arch=c000003e syscall=59 success=no exit=-13 a0=1249360 a1=124a8c0 a2=124ac60 a3=8 items=0 ppid=16742 pid=16743 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211911589.698:1073): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211911589.698:1073): arch=c000003e syscall=59 success=no exit=-13 a0=1a3d360 a1=1a3f6a0 a2=1a3ed90 a3=8 items=0 ppid=16752 pid=16753 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211911842.860:1074): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211911842.860:1074): arch=c000003e syscall=59 success=no exit=-13 a0=63e360 a1=6406a0 a2=63fe20 a3=8 items=0 ppid=16770 pid=16771 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211911843.612:1075): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211911843.612:1075): arch=c000003e syscall=59 success=no exit=-13 a0=133a360 a1=133b8c0 a2=133bc60 a3=8 items=0 ppid=16774 pid=16775 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1211914801.599:1076): user pid=16882 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211914801.602:1077): user pid=16882 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211914801.604:1078): login pid=16882 uid=0 old auid=4294967295 new auid=1001 old ses=4294967295 new ses=168
>type=USER_ACCT msg=audit(1211914801.605:1079): user pid=16884 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211914801.607:1080): user pid=16884 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1211914801.609:1081): user pid=16882 uid=0 auid=1001 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211914801.611:1082): login pid=16884 uid=0 old auid=4294967295 new auid=1000 old ses=4294967295 new ses=169
>type=USER_START msg=audit(1211914801.622:1083): user pid=16884 uid=0 auid=1000 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1211914861.663:1084): user pid=16893 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211914861.665:1085): user pid=16893 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211914861.666:1086): login pid=16893 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=170
>type=USER_START msg=audit(1211914861.672:1087): user pid=16893 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1211914861.710:1088): user pid=16893 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1211914861.710:1089): user pid=16893 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=SELINUX_ERR msg=audit(1211915316.606:1090): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211915316.606:1090): arch=c000003e syscall=59 success=no exit=-13 a0=ff7360 a1=ff9610 a2=ffa040 a3=8 items=0 ppid=16924 pid=16925 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211916824.841:1091): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211916824.841:1091): arch=c000003e syscall=59 success=no exit=-13 a0=18d4360 a1=18d58a0 a2=18d5dc0 a3=8 items=0 ppid=16979 pid=16980 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211917086.005:1092): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211917086.005:1092): arch=c000003e syscall=59 success=no exit=-13 a0=1f1f360 a1=1f1e5d0 a2=1f20d90 a3=8 items=0 ppid=16996 pid=16997 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1211918401.741:1093): user pid=17046 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211918401.745:1094): user pid=17046 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211918401.751:1095): login pid=17046 uid=0 old auid=4294967295 new auid=1001 old ses=4294967295 new ses=171
>type=USER_START msg=audit(1211918401.758:1096): user pid=17046 uid=0 auid=1001 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1211918401.762:1097): user pid=17048 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211918401.769:1098): user pid=17048 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211918401.770:1099): login pid=17048 uid=0 old auid=4294967295 new auid=1000 old ses=4294967295 new ses=172
>type=USER_START msg=audit(1211918401.776:1100): user pid=17048 uid=0 auid=1000 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1211918461.814:1101): user pid=17057 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211918461.816:1102): user pid=17057 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211918461.817:1103): login pid=17057 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=173
>type=USER_START msg=audit(1211918461.823:1104): user pid=17057 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1211918461.860:1105): user pid=17057 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1211918461.860:1106): user pid=17057 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=SELINUX_ERR msg=audit(1211918534.422:1107): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211918534.422:1107): arch=c000003e syscall=59 success=no exit=-13 a0=12c6360 a1=12c7880 a2=12c7dc0 a3=8 items=0 ppid=17074 pid=17075 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211918667.314:1108): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211918667.314:1108): arch=c000003e syscall=59 success=no exit=-13 a0=2365360 a1=23676a0 a2=2366d90 a3=8 items=0 ppid=17083 pid=17084 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211919545.269:1109): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211919545.269:1109): arch=c000003e syscall=59 success=no exit=-13 a0=6b9360 a1=6bb630 a2=6bbf00 a3=8 items=0 ppid=17128 pid=17129 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211919797.861:1110): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211919797.861:1110): arch=c000003e syscall=59 success=no exit=-13 a0=14e2360 a1=14e46a0 a2=14e3e20 a3=8 items=0 ppid=17163 pid=17164 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1211919840.268:1111): auid=1000 uid=1000 gid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_mono_t:s0-s0:c0.c1023 pid=17112 comm="f-spot" sig=11
>type=SELINUX_ERR msg=audit(1211919923.518:1112): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211919923.518:1112): arch=c000003e syscall=59 success=no exit=-13 a0=b45360 a1=b468a0 a2=b46dc0 a3=8 items=0 ppid=17280 pid=17281 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211919928.078:1113): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211919928.078:1113): arch=c000003e syscall=59 success=no exit=-13 a0=1262360 a1=12638c0 a2=1263c60 a3=8 items=0 ppid=17284 pid=17285 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211920177.329:1114): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211920177.329:1114): arch=c000003e syscall=59 success=no exit=-13 a0=1c42360 a1=1c44650 a2=1c45400 a3=8 items=0 ppid=17301 pid=17302 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1211920575.935:1115): auid=1000 uid=1000 gid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_mono_t:s0-s0:c0.c1023 pid=17255 comm="f-spot" sig=11
>type=SELINUX_ERR msg=audit(1211920679.897:1116): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211920679.897:1116): arch=c000003e syscall=59 success=no exit=-13 a0=17ba360 a1=17bb880 a2=17bbdc0 a3=8 items=0 ppid=17418 pid=17419 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211920682.783:1117): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211920682.783:1117): arch=c000003e syscall=59 success=no exit=-13 a0=19e2360 a1=19e38a0 a2=19e3dc0 a3=8 items=0 ppid=17422 pid=17423 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211920933.337:1118): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211920933.337:1118): arch=c000003e syscall=59 success=no exit=-13 a0=998360 a1=99a650 a2=99b4b0 a3=8 items=0 ppid=17463 pid=17464 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211921065.351:1119): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211921065.351:1119): arch=c000003e syscall=59 success=no exit=-13 a0=1a62360 a1=1a64630 a2=1a65430 a3=8 items=0 ppid=17482 pid=17483 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211921444.689:1120): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211921444.689:1120): arch=c000003e syscall=59 success=no exit=-13 a0=1766360 a1=1768530 a2=17692f0 a3=8 items=0 ppid=17508 pid=17509 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211921574.576:1121): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211921574.576:1121): arch=c000003e syscall=59 success=no exit=-13 a0=1e51360 a1=1e52880 a2=1e52dc0 a3=8 items=0 ppid=17525 pid=17526 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211921947.467:1122): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211921947.467:1122): arch=c000003e syscall=59 success=no exit=-13 a0=10b7360 a1=10b96a0 a2=10b8d90 a3=8 items=0 ppid=17551 pid=17552 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1211922002.179:1123): user pid=17555 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1211922002.184:1124): user pid=17556 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211922002.198:1125): user pid=17555 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211922002.200:1126): login pid=17555 uid=0 old auid=4294967295 new auid=1001 old ses=4294967295 new ses=174
>type=CRED_ACQ msg=audit(1211922002.202:1127): user pid=17556 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211922002.203:1128): login pid=17556 uid=0 old auid=4294967295 new auid=1000 old ses=4294967295 new ses=175
>type=USER_START msg=audit(1211922002.260:1129): user pid=17555 uid=0 auid=1001 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1211922002.277:1130): user pid=17556 uid=0 auid=1000 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1211922061.544:1131): user pid=17565 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211922061.546:1132): user pid=17565 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211922061.547:1133): login pid=17565 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=176
>type=USER_START msg=audit(1211922061.552:1134): user pid=17565 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1211922061.821:1135): user pid=17565 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1211922061.822:1136): user pid=17565 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=SELINUX_ERR msg=audit(1211922260.435:1137): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211922260.435:1137): arch=c000003e syscall=59 success=no exit=-13 a0=c4f360 a1=c516a0 a2=c50d90 a3=8 items=0 ppid=17588 pid=17589 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211922760.638:1138): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211922760.638:1138): arch=c000003e syscall=59 success=no exit=-13 a0=1fde360 a1=1fdf880 a2=1fdfdc0 a3=8 items=0 ppid=17612 pid=17613 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211925247.413:1139): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211925247.413:1139): arch=c000003e syscall=59 success=no exit=-13 a0=cb2360 a1=cb38c0 a2=cb3c60 a3=8 items=0 ppid=17733 pid=17734 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1211925602.099:1140): user pid=17750 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211925602.105:1141): user pid=17750 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211925602.107:1142): login pid=17750 uid=0 old auid=4294967295 new auid=1001 old ses=4294967295 new ses=177
>type=USER_ACCT msg=audit(1211925602.112:1143): user pid=17751 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211925602.114:1144): user pid=17751 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211925602.116:1145): login pid=17751 uid=0 old auid=4294967295 new auid=1000 old ses=4294967295 new ses=178
>type=USER_START msg=audit(1211925602.166:1146): user pid=17750 uid=0 auid=1001 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1211925602.172:1147): user pid=17751 uid=0 auid=1000 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1211925661.484:1148): user pid=17761 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211925661.486:1149): user pid=17761 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211925661.487:1150): login pid=17761 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=179
>type=USER_START msg=audit(1211925661.492:1151): user pid=17761 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1211925661.809:1152): user pid=17761 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1211925661.809:1153): user pid=17761 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=SELINUX_ERR msg=audit(1211926339.873:1154): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211926339.873:1154): arch=c000003e syscall=59 success=no exit=-13 a0=2209360 a1=220b630 a2=220c000 a3=8 items=0 ppid=17794 pid=17795 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211926830.463:1155): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211926830.463:1155): arch=c000003e syscall=59 success=no exit=-13 a0=f55360 a1=f57630 a2=f57fd0 a3=8 items=0 ppid=17817 pid=17818 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211927568.056:1156): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211927568.056:1156): arch=c000003e syscall=59 success=no exit=-13 a0=1731360 a1=17328c0 a2=1732c60 a3=8 items=0 ppid=17849 pid=17850 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211927940.672:1157): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211927940.672:1157): arch=c000003e syscall=59 success=no exit=-13 a0=f5a360 a1=f5b8a0 a2=f5bdc0 a3=8 items=0 ppid=17867 pid=17868 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211928551.168:1158): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211928551.168:1158): arch=c000003e syscall=59 success=no exit=-13 a0=23fd360 a1=23fe880 a2=23fedc0 a3=8 items=0 ppid=17890 pid=17891 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211928919.648:1159): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211928919.648:1159): arch=c000003e syscall=59 success=no exit=-13 a0=c38360 a1=c398c0 a2=c39c60 a3=8 items=0 ppid=17916 pid=17917 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211928921.915:1160): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211928921.915:1160): arch=c000003e syscall=59 success=no exit=-13 a0=733360 a1=7348c0 a2=734c60 a3=8 items=0 ppid=17920 pid=17921 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1211929201.845:1161): user pid=17932 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211929201.849:1162): user pid=17932 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211929201.854:1163): login pid=17932 uid=0 old auid=4294967295 new auid=1001 old ses=4294967295 new ses=180
>type=USER_ACCT msg=audit(1211929201.858:1164): user pid=17934 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1211929201.861:1165): user pid=17932 uid=0 auid=1001 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211929201.870:1166): user pid=17934 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211929201.872:1167): login pid=17934 uid=0 old auid=4294967295 new auid=1000 old ses=4294967295 new ses=181
>type=USER_START msg=audit(1211929201.878:1168): user pid=17934 uid=0 auid=1000 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1211929261.955:1169): user pid=17946 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211929261.956:1170): user pid=17946 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211929261.958:1171): login pid=17946 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=182
>type=USER_START msg=audit(1211929261.963:1172): user pid=17946 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1211929262.046:1173): user pid=17946 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1211929262.047:1174): user pid=17946 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=SELINUX_ERR msg=audit(1211929330.449:1175): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211929330.449:1175): arch=c000003e syscall=59 success=no exit=-13 a0=1347360 a1=13488a0 a2=1348dc0 a3=8 items=0 ppid=17962 pid=17963 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211929820.678:1176): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211929820.678:1176): arch=c000003e syscall=59 success=no exit=-13 a0=cd8360 a1=cd9880 a2=cd9dc0 a3=8 items=0 ppid=17984 pid=17985 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211930679.096:1177): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211930679.096:1177): arch=c000003e syscall=59 success=no exit=-13 a0=f2d360 a1=f2e8c0 a2=f2ec60 a3=8 items=0 ppid=18024 pid=18025 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211930802.819:1178): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211930802.819:1178): arch=c000003e syscall=59 success=no exit=-13 a0=1549360 a1=154a8c0 a2=154ac60 a3=8 items=0 ppid=18034 pid=18035 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211931049.269:1179): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211931049.269:1179): arch=c000003e syscall=59 success=no exit=-13 a0=18f8360 a1=18f98c0 a2=18f9c60 a3=8 items=0 ppid=18048 pid=18049 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211932274.694:1180): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211932274.694:1180): arch=c000003e syscall=59 success=no exit=-13 a0=10cf360 a1=10d16a0 a2=10d0d90 a3=8 items=0 ppid=18089 pid=18090 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1211932801.079:1181): user pid=18117 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211932801.082:1182): user pid=18117 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211932801.083:1183): login pid=18117 uid=0 old auid=4294967295 new auid=1001 old ses=4294967295 new ses=183
>type=USER_ACCT msg=audit(1211932801.095:1184): user pid=18119 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211932801.096:1185): user pid=18119 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1211932801.097:1186): user pid=18117 uid=0 auid=1001 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211932801.102:1187): login pid=18119 uid=0 old auid=4294967295 new auid=1000 old ses=4294967295 new ses=184
>type=USER_START msg=audit(1211932801.109:1188): user pid=18119 uid=0 auid=1000 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1211932861.164:1189): user pid=18128 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211932861.167:1190): user pid=18128 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211932861.168:1191): login pid=18128 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=185
>type=USER_START msg=audit(1211932861.174:1192): user pid=18128 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1211932861.214:1193): user pid=18128 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1211932861.214:1194): user pid=18128 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=SELINUX_ERR msg=audit(1211933172.862:1195): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211933172.862:1195): arch=c000003e syscall=59 success=no exit=-13 a0=18d9360 a1=18da880 a2=18dadc0 a3=8 items=0 ppid=18151 pid=18152 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211933541.391:1196): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211933541.391:1196): arch=c000003e syscall=59 success=no exit=-13 a0=2568360 a1=25698c0 a2=2569c60 a3=8 items=0 ppid=18173 pid=18174 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211935989.797:1197): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211935989.797:1197): arch=c000003e syscall=59 success=no exit=-13 a0=1a50360 a1=1a52610 a2=1a53070 a3=8 items=0 ppid=18264 pid=18265 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1211936401.245:1198): user pid=18279 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211936401.248:1199): user pid=18279 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211936401.249:1200): login pid=18279 uid=0 old auid=4294967295 new auid=1001 old ses=4294967295 new ses=186
>type=USER_START msg=audit(1211936401.257:1201): user pid=18279 uid=0 auid=1001 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1211936401.286:1202): user pid=18284 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211936401.290:1203): user pid=18284 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211936401.292:1204): login pid=18284 uid=0 old auid=4294967295 new auid=1000 old ses=4294967295 new ses=187
>type=USER_START msg=audit(1211936401.297:1205): user pid=18284 uid=0 auid=1000 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1211936461.350:1206): user pid=18290 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211936461.352:1207): user pid=18290 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211936461.353:1208): login pid=18290 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=188
>type=USER_START msg=audit(1211936461.374:1209): user pid=18290 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1211936461.411:1210): user pid=18290 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1211936461.412:1211): user pid=18290 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=SELINUX_ERR msg=audit(1211936773.819:1212): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211936773.819:1212): arch=c000003e syscall=59 success=no exit=-13 a0=14d3360 a1=14d5630 a2=14d5d60 a3=8 items=0 ppid=18313 pid=18314 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1211940001.451:1213): user pid=18438 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211940001.454:1214): user pid=18438 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211940001.456:1215): login pid=18438 uid=0 old auid=4294967295 new auid=1001 old ses=4294967295 new ses=189
>type=USER_ACCT msg=audit(1211940001.458:1216): user pid=18440 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211940001.459:1217): user pid=18440 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1211940001.462:1218): user pid=18438 uid=0 auid=1001 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211940001.466:1219): login pid=18440 uid=0 old auid=4294967295 new auid=1000 old ses=4294967295 new ses=190
>type=USER_START msg=audit(1211940001.472:1220): user pid=18440 uid=0 auid=1000 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1211940061.516:1221): user pid=18449 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211940061.518:1222): user pid=18449 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211940061.519:1223): login pid=18449 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=191
>type=USER_START msg=audit(1211940061.524:1224): user pid=18449 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1211940061.579:1225): user pid=18449 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1211940061.579:1226): user pid=18449 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=SELINUX_ERR msg=audit(1211942574.976:1227): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211942574.976:1227): arch=c000003e syscall=59 success=no exit=-13 a0=17c6360 a1=17c55d0 a2=17c7d90 a3=8 items=0 ppid=18544 pid=18545 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1211943601.619:1228): user pid=18586 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211943601.621:1229): user pid=18586 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211943601.623:1230): login pid=18586 uid=0 old auid=4294967295 new auid=1001 old ses=4294967295 new ses=192
>type=USER_ACCT msg=audit(1211943601.624:1231): user pid=18588 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211943601.626:1232): user pid=18588 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211943601.627:1233): login pid=18588 uid=0 old auid=4294967295 new auid=1000 old ses=4294967295 new ses=193
>type=USER_START msg=audit(1211943601.629:1234): user pid=18586 uid=0 auid=1001 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1211943601.634:1235): user pid=18588 uid=0 auid=1000 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1211943661.678:1236): user pid=18597 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211943661.680:1237): user pid=18597 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211943661.681:1238): login pid=18597 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=194
>type=USER_START msg=audit(1211943661.687:1239): user pid=18597 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1211943661.721:1240): user pid=18597 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1211943661.722:1241): user pid=18597 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=SELINUX_ERR msg=audit(1211943729.710:1242): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211943729.710:1242): arch=c000003e syscall=59 success=no exit=-13 a0=2315360 a1=2318080 a2=23184f0 a3=8 items=0 ppid=18614 pid=18615 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1211943901.734:1243): user pid=18620 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211943901.737:1244): user pid=18620 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211943901.738:1245): login pid=18620 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=195
>type=USER_START msg=audit(1211943901.744:1246): user pid=18620 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=SELINUX_ERR msg=audit(1211943915.200:1247): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211943915.200:1247): arch=c000003e syscall=59 success=no exit=-13 a0=119a360 a1=119c600 a2=119bd00 a3=8 items=0 ppid=18655 pid=18656 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211944589.530:1248): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211944589.530:1248): arch=c000003e syscall=59 success=no exit=-13 a0=1d36360 a1=1d386a0 a2=1d37d90 a3=8 items=0 ppid=18684 pid=18685 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211945447.728:1249): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211945447.728:1249): arch=c000003e syscall=59 success=no exit=-13 a0=1a86360 a1=1a88610 a2=1a89040 a3=8 items=0 ppid=18719 pid=18720 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211945694.307:1250): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211945694.307:1250): arch=c000003e syscall=59 success=no exit=-13 a0=bcc360 a1=bce470 a2=bcf140 a3=8 items=0 ppid=18732 pid=18733 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1211947202.099:1251): user pid=18793 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1211947202.101:1252): user pid=18792 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211947202.111:1253): user pid=18793 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211947202.111:1254): login pid=18793 uid=0 old auid=4294967295 new auid=1000 old ses=4294967295 new ses=196
>type=CRED_ACQ msg=audit(1211947202.112:1255): user pid=18792 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211947202.112:1256): login pid=18792 uid=0 old auid=4294967295 new auid=1001 old ses=4294967295 new ses=197
>type=USER_START msg=audit(1211947202.175:1257): user pid=18793 uid=0 auid=1000 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1211947202.177:1258): user pid=18792 uid=0 auid=1001 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1211947215.219:1259): user pid=18620 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1211947215.220:1260): user pid=18620 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1211947261.232:1261): user pid=18829 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211947261.235:1262): user pid=18829 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211947261.236:1263): login pid=18829 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=198
>type=USER_START msg=audit(1211947261.242:1264): user pid=18829 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1211947261.436:1265): user pid=18829 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1211947261.437:1266): user pid=18829 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=SELINUX_ERR msg=audit(1211948062.753:1267): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211948062.753:1267): arch=c000003e syscall=59 success=no exit=-13 a0=72a360 a1=72c680 a2=72cf20 a3=8 items=0 ppid=18868 pid=18869 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211949044.957:1268): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211949044.957:1268): arch=c000003e syscall=59 success=no exit=-13 a0=d87360 a1=d89580 a2=d8a360 a3=8 items=0 ppid=18907 pid=18908 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1211950801.469:1269): user pid=18970 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211950801.472:1270): user pid=18970 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211950801.473:1271): login pid=18970 uid=0 old auid=4294967295 new auid=1001 old ses=4294967295 new ses=199
>type=USER_START msg=audit(1211950801.479:1272): user pid=18970 uid=0 auid=1001 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1211950801.509:1273): user pid=18972 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211950801.511:1274): user pid=18972 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211950801.512:1275): login pid=18972 uid=0 old auid=4294967295 new auid=1000 old ses=4294967295 new ses=200
>type=USER_START msg=audit(1211950801.518:1276): user pid=18972 uid=0 auid=1000 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1211950861.544:1277): user pid=18981 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211950861.547:1278): user pid=18981 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211950861.548:1279): login pid=18981 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=201
>type=USER_START msg=audit(1211950861.553:1280): user pid=18981 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1211950861.590:1281): user pid=18981 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1211950861.591:1282): user pid=18981 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=SELINUX_ERR msg=audit(1211952397.189:1283): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211952397.189:1283): arch=c000003e syscall=59 success=no exit=-13 a0=20f5360 a1=20f8080 a2=20f8540 a3=8 items=0 ppid=19046 pid=19047 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211953501.263:1284): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211953501.263:1284): arch=c000003e syscall=59 success=no exit=-13 a0=c96360 a1=c98430 a2=c99410 a3=8 items=0 ppid=19088 pid=19089 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1211954401.623:1285): user pid=19127 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211954401.625:1286): user pid=19127 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211954401.626:1287): login pid=19127 uid=0 old auid=4294967295 new auid=1001 old ses=4294967295 new ses=202
>type=USER_START msg=audit(1211954401.632:1288): user pid=19127 uid=0 auid=1001 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1211954401.659:1289): user pid=19129 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211954401.661:1290): user pid=19129 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211954401.662:1291): login pid=19129 uid=0 old auid=4294967295 new auid=1000 old ses=4294967295 new ses=203
>type=USER_START msg=audit(1211954401.668:1292): user pid=19129 uid=0 auid=1000 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1211954461.695:1293): user pid=19138 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211954461.697:1294): user pid=19138 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211954461.698:1295): login pid=19138 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=204
>type=USER_START msg=audit(1211954461.705:1296): user pid=19138 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1211954461.742:1297): user pid=19138 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1211954461.742:1298): user pid=19138 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=SELINUX_ERR msg=audit(1211955262.947:1299): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211955262.947:1299): arch=c000003e syscall=59 success=no exit=-13 a0=2501360 a1=2502880 a2=2502dc0 a3=8 items=0 ppid=19179 pid=19180 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211956490.325:1300): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211956490.325:1300): arch=c000003e syscall=59 success=no exit=-13 a0=103f360 a1=1040880 a2=1040dc0 a3=8 items=0 ppid=19225 pid=19226 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1211958001.775:1301): user pid=19281 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211958001.778:1302): user pid=19281 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211958001.780:1303): login pid=19281 uid=0 old auid=4294967295 new auid=1001 old ses=4294967295 new ses=205
>type=USER_START msg=audit(1211958001.785:1304): user pid=19281 uid=0 auid=1001 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1211958001.811:1305): user pid=19283 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211958001.814:1306): user pid=19283 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211958001.817:1307): login pid=19283 uid=0 old auid=4294967295 new auid=1000 old ses=4294967295 new ses=206
>type=USER_START msg=audit(1211958001.823:1308): user pid=19283 uid=0 auid=1000 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1211958061.849:1309): user pid=19292 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211958061.851:1310): user pid=19292 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211958061.852:1311): login pid=19292 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=207
>type=USER_START msg=audit(1211958061.858:1312): user pid=19292 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1211958061.895:1313): user pid=19292 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1211958061.896:1314): user pid=19292 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1211958121.907:1315): user pid=19304 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211958121.909:1316): user pid=19304 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211958121.910:1317): login pid=19304 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=208
>type=USER_START msg=audit(1211958121.916:1318): user pid=19304 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1211958755.145:1319): user pid=19304 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1211958755.145:1320): user pid=19304 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=SELINUX_ERR msg=audit(1211958864.290:1321): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211958864.290:1321): arch=c000003e syscall=59 success=no exit=-13 a0=1b8f360 a1=1b908a0 a2=1b90dc0 a3=8 items=0 ppid=19979 pid=19980 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211961435.861:1322): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211961435.861:1322): arch=c000003e syscall=59 success=no exit=-13 a0=1012360 a1=1014650 a2=10154b0 a3=8 items=0 ppid=20075 pid=20076 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1211961601.178:1323): user pid=20082 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211961601.181:1324): user pid=20082 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211961601.182:1325): login pid=20082 uid=0 old auid=4294967295 new auid=1001 old ses=4294967295 new ses=209
>type=USER_START msg=audit(1211961601.188:1326): user pid=20082 uid=0 auid=1001 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1211961601.207:1327): user pid=20084 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211961601.209:1328): user pid=20084 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211961601.210:1329): login pid=20084 uid=0 old auid=4294967295 new auid=1000 old ses=4294967295 new ses=210
>type=USER_START msg=audit(1211961601.217:1330): user pid=20084 uid=0 auid=1000 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1211961661.259:1331): user pid=20093 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211961661.262:1332): user pid=20093 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211961661.263:1333): login pid=20093 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=211
>type=USER_START msg=audit(1211961661.269:1334): user pid=20093 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1211961661.307:1335): user pid=20093 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1211961661.307:1336): user pid=20093 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=SELINUX_ERR msg=audit(1211962829.360:1337): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211962829.360:1337): arch=c000003e syscall=59 success=no exit=-13 a0=20fe360 a1=20ff880 a2=20ffdc0 a3=8 items=0 ppid=20143 pid=20144 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211963443.875:1338): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211963443.875:1338): arch=c000003e syscall=59 success=no exit=-13 a0=bcd360 a1=bce880 a2=bcedc0 a3=8 items=0 ppid=20172 pid=20173 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211964057.369:1339): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211964057.369:1339): arch=c000003e syscall=59 success=no exit=-13 a0=cd6360 a1=cd86a0 a2=cd7e20 a3=8 items=0 ppid=20197 pid=20198 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211964058.477:1340): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211964058.477:1340): arch=c000003e syscall=59 success=no exit=-13 a0=19d9360 a1=19da8a0 a2=19dadc0 a3=8 items=0 ppid=20201 pid=20202 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1211965201.349:1341): user pid=20246 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211965201.351:1342): user pid=20246 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211965201.352:1343): login pid=20246 uid=0 old auid=4294967295 new auid=1001 old ses=4294967295 new ses=212
>type=USER_ACCT msg=audit(1211965201.354:1344): user pid=20248 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211965201.355:1345): user pid=20248 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211965201.356:1346): login pid=20248 uid=0 old auid=4294967295 new auid=1000 old ses=4294967295 new ses=213
>type=USER_START msg=audit(1211965201.358:1347): user pid=20246 uid=0 auid=1001 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1211965201.369:1348): user pid=20248 uid=0 auid=1000 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1211965261.410:1349): user pid=20257 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211965261.413:1350): user pid=20257 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211965261.414:1351): login pid=20257 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=214
>type=USER_START msg=audit(1211965261.420:1352): user pid=20257 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1211965261.457:1353): user pid=20257 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1211965261.458:1354): user pid=20257 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=SELINUX_ERR msg=audit(1211965450.903:1355): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211965450.903:1355): arch=c000003e syscall=59 success=no exit=-13 a0=22c4360 a1=22c66a0 a2=22c5e20 a3=8 items=0 ppid=20277 pid=20278 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211966064.881:1356): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211966064.881:1356): arch=c000003e syscall=59 success=no exit=-13 a0=1dc7360 a1=1dc88c0 a2=1dc8c60 a3=8 items=0 ppid=20304 pid=20305 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211966311.985:1357): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211966311.985:1357): arch=c000003e syscall=59 success=no exit=-13 a0=9a2360 a1=9a46a0 a2=9a3d90 a3=8 items=0 ppid=20317 pid=20318 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211966313.250:1358): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211966313.250:1358): arch=c000003e syscall=59 success=no exit=-13 a0=2208360 a1=220a6a0 a2=2209d90 a3=8 items=0 ppid=20321 pid=20322 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211966438.631:1359): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211966438.631:1359): arch=c000003e syscall=59 success=no exit=-13 a0=70b360 a1=70d6a0 a2=70cd90 a3=8 items=0 ppid=20330 pid=20331 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211968154.721:1360): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211968154.721:1360): arch=c000003e syscall=59 success=no exit=-13 a0=1c75360 a1=1c76880 a2=1c76dc0 a3=8 items=0 ppid=20391 pid=20392 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1211968801.490:1361): user pid=20421 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211968801.494:1362): user pid=20421 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211968801.495:1363): login pid=20421 uid=0 old auid=4294967295 new auid=1001 old ses=4294967295 new ses=215
>type=USER_START msg=audit(1211968801.504:1364): user pid=20421 uid=0 auid=1001 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1211968801.528:1365): user pid=20423 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211968801.530:1366): user pid=20423 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211968801.532:1367): login pid=20423 uid=0 old auid=4294967295 new auid=1000 old ses=4294967295 new ses=216
>type=USER_START msg=audit(1211968801.537:1368): user pid=20423 uid=0 auid=1000 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1211968861.562:1369): user pid=20432 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211968861.564:1370): user pid=20432 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211968861.565:1371): login pid=20432 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=217
>type=USER_START msg=audit(1211968861.570:1372): user pid=20432 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1211968861.606:1373): user pid=20432 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1211968861.606:1374): user pid=20432 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1211969108.541:1375): auid=1000 uid=1000 gid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_mono_t:s0-s0:c0.c1023 pid=17487 comm="f-spot" sig=11
>type=SELINUX_ERR msg=audit(1211969905.740:1376): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211969905.740:1376): arch=c000003e syscall=59 success=no exit=-13 a0=237c360 a1=237e630 a2=237ef00 a3=8 items=0 ppid=20519 pid=20520 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1211970714.602:1377): avc:  denied  { execmem } for  pid=20749 comm="npviewer.bin" scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1211970714.602:1377): arch=40000003 syscall=125 per=8 success=no exit=-13 a0=f36e0000 a1=1000 a2=5 a3=ffb685bc items=0 ppid=17402 pid=20749 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) ses=1 comm="npviewer.bin" exe="/usr/lib/nspluginwrapper/npviewer.bin" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=ANOM_ABEND msg=audit(1211970714.607:1378): auid=1000 uid=1000 gid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=20749 comm="npviewer.bin" sig=11
>type=AVC msg=audit(1211970759.747:1379): avc:  denied  { execmem } for  pid=20766 comm="npviewer.bin" scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1211970759.747:1379): arch=40000003 syscall=125 per=8 success=no exit=-13 a0=f36fe000 a1=1000 a2=5 a3=ffa884dc items=0 ppid=17402 pid=20766 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) ses=1 comm="npviewer.bin" exe="/usr/lib/nspluginwrapper/npviewer.bin" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=ANOM_ABEND msg=audit(1211970759.750:1380): auid=1000 uid=1000 gid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=20766 comm="npviewer.bin" sig=11
>type=AVC msg=audit(1211970760.952:1381): avc:  denied  { execmem } for  pid=20781 comm="npviewer.bin" scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1211970760.952:1381): arch=40000003 syscall=125 per=8 success=no exit=-13 a0=f36e7000 a1=1000 a2=5 a3=ffa6f4bc items=0 ppid=17402 pid=20781 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) ses=1 comm="npviewer.bin" exe="/usr/lib/nspluginwrapper/npviewer.bin" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=ANOM_ABEND msg=audit(1211970761.001:1382): auid=1000 uid=1000 gid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=20781 comm="npviewer.bin" sig=11
>type=ANOM_ABEND msg=audit(1211970875.506:1383): auid=1000 uid=1000 gid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=20800 comm="npviewer.bin" sig=11
>type=AVC msg=audit(1211970877.199:1384): avc:  denied  { execmem } for  pid=20821 comm="npviewer.bin" scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1211970877.199:1384): arch=40000003 syscall=125 per=8 success=no exit=-13 a0=f58ab000 a1=1000 a2=5 a3=ffec090c items=0 ppid=17402 pid=20821 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) ses=1 comm="npviewer.bin" exe="/usr/lib/nspluginwrapper/npviewer.bin" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=ANOM_ABEND msg=audit(1211970877.240:1385): auid=1000 uid=1000 gid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=20821 comm="npviewer.bin" sig=11
>type=AVC msg=audit(1211970882.200:1386): avc:  denied  { execmem } for  pid=20836 comm="npviewer.bin" scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1211970882.200:1386): arch=40000003 syscall=125 per=8 success=no exit=-13 a0=f36bb000 a1=1000 a2=5 a3=fff4619c items=0 ppid=17402 pid=20836 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) ses=1 comm="npviewer.bin" exe="/usr/lib/nspluginwrapper/npviewer.bin" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=ANOM_ABEND msg=audit(1211970882.275:1387): auid=1000 uid=1000 gid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=20836 comm="npviewer.bin" sig=11
>type=USER_ACCT msg=audit(1211972401.637:1388): user pid=21019 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211972401.640:1389): user pid=21019 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211972401.641:1390): login pid=21019 uid=0 old auid=4294967295 new auid=1001 old ses=4294967295 new ses=218
>type=USER_START msg=audit(1211972401.647:1391): user pid=21019 uid=0 auid=1001 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1211972401.681:1392): user pid=21024 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211972401.683:1393): user pid=21024 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211972401.684:1394): login pid=21024 uid=0 old auid=4294967295 new auid=1000 old ses=4294967295 new ses=219
>type=USER_START msg=audit(1211972401.689:1395): user pid=21024 uid=0 auid=1000 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1211972461.729:1396): user pid=21031 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211972461.730:1397): user pid=21031 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211972461.731:1398): login pid=21031 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=220
>type=USER_START msg=audit(1211972461.737:1399): user pid=21031 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1211972461.801:1400): user pid=21031 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1211972461.801:1401): user pid=21031 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1211972676.250:1402): user pid=3072 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bogado" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1211972676.396:1403): user pid=3072 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="bogado" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1211972684.913:1404): user pid=21188 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="anuska" exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:200.20.112.130, addr=::ffff:200.20.112.130, terminal=dovecot res=success)'
>type=USER_ACCT msg=audit(1211972684.920:1405): user pid=21188 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="anuska" exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:200.20.112.130, addr=::ffff:200.20.112.130, terminal=dovecot res=success)'
>type=USER_AUTH msg=audit(1211972978.584:1406): user pid=21162 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="bogado" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1211972978.592:1407): user pid=21162 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bogado" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1211972978.598:1408): user pid=21162 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bogado" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1211972978.744:1409): login pid=21162 uid=0 old auid=4294967295 new auid=1000 old ses=4294967295 new ses=221
>type=USER_ROLE_CHANGE msg=audit(1211972978.846:1410): user pid=21162 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1211972979.481:1411): user pid=21162 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="bogado" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1211972979.484:1412): user pid=21162 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1211973021.176:1413): user pid=21515 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="anuska" exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:200.20.112.130, addr=::ffff:200.20.112.130, terminal=dovecot res=success)'
>type=USER_ACCT msg=audit(1211973021.183:1414): user pid=21515 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="anuska" exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:200.20.112.130, addr=::ffff:200.20.112.130, terminal=dovecot res=success)'
>type=SELINUX_ERR msg=audit(1211973875.204:1415): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211973875.204:1415): arch=c000003e syscall=59 success=no exit=-13 a0=e6c360 a1=e6e650 a2=e6f490 a3=8 items=0 ppid=21660 pid=21661 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211974609.941:1416): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211974609.941:1416): arch=c000003e syscall=59 success=no exit=-13 a0=12e0360 a1=12e26a0 a2=12e1d90 a3=8 items=0 ppid=21753 pid=21754 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_AUTH msg=audit(1211975145.621:1417): user pid=21859 uid=1000 auid=1000 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1211975145.627:1418): user pid=21859 uid=1000 auid=1000 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1211975145.680:1419): user pid=21859 uid=1000 auid=1000 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1211975145.681:1420): user pid=21859 uid=1000 auid=1000 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_DISP msg=audit(1211975320.003:1421): user pid=21859 uid=1000 auid=1000 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1211975320.005:1422): user pid=21859 uid=1000 auid=1000 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_DISP msg=audit(1211975566.259:1423): user pid=21162 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bogado" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1211975566.330:1424): user pid=21162 uid=0 auid=1000 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="bogado" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1211976001.844:1425): user pid=22176 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211976001.848:1426): user pid=22176 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211976001.850:1427): login pid=22176 uid=0 old auid=4294967295 new auid=1001 old ses=4294967295 new ses=222
>type=USER_ACCT msg=audit(1211976001.852:1428): user pid=22178 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211976001.854:1429): user pid=22178 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211976001.855:1430): login pid=22178 uid=0 old auid=4294967295 new auid=1000 old ses=4294967295 new ses=223
>type=USER_START msg=audit(1211976001.857:1431): user pid=22176 uid=0 auid=1001 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1211976001.869:1432): user pid=22178 uid=0 auid=1000 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1211976061.910:1433): user pid=22187 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211976061.912:1434): user pid=22187 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211976061.914:1435): login pid=22187 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=224
>type=USER_START msg=audit(1211976061.921:1436): user pid=22187 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1211976061.959:1437): user pid=22187 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1211976061.959:1438): user pid=22187 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=SELINUX_ERR msg=audit(1211976985.798:1439): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211976985.798:1439): arch=c000003e syscall=59 success=no exit=-13 a0=17f4360 a1=17f58c0 a2=17f5c60 a3=8 items=0 ppid=22233 pid=22234 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211977475.957:1440): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211977475.957:1440): arch=c000003e syscall=59 success=no exit=-13 a0=1c6f360 a1=1c71650 a2=1c72490 a3=8 items=0 ppid=22253 pid=22254 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_AUTH msg=audit(1211978460.168:1441): user pid=22281 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="anuska" exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:200.20.112.130, addr=::ffff:200.20.112.130, terminal=dovecot res=success)'
>type=USER_ACCT msg=audit(1211978460.175:1442): user pid=22281 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="anuska" exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:200.20.112.130, addr=::ffff:200.20.112.130, terminal=dovecot res=success)'
>type=SELINUX_ERR msg=audit(1211979060.652:1443): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211979060.652:1443): arch=c000003e syscall=59 success=no exit=-13 a0=7b3360 a1=7b5610 a2=7b51a0 a3=8 items=0 ppid=22365 pid=22366 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=CRED_DISP msg=audit(1211979119.998:1444): user pid=15658 uid=0 auid=1000 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bogado" exe="/usr/sbin/sshd" (hostname=139.82.86.2, addr=139.82.86.2, terminal=ssh res=success)'
>type=USER_END msg=audit(1211979120.000:1445): user pid=15658 uid=0 auid=1000 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="bogado" exe="/usr/sbin/sshd" (hostname=139.82.86.2, addr=139.82.86.2, terminal=ssh res=success)'
>type=DAEMON_END msg=audit(1211979130.668:884): auditd normal halt, sending auid=0 pid=22705 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1211979230.854:7032): auditd start, ver=1.7.3 format=raw kernel=2.6.25.3-18.fc9.x86_64 auid=4294967295 pid=2140 res=success
>type=CONFIG_CHANGE msg=audit(1211979231.002:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=LABEL_LEVEL_CHANGE msg=audit(1211979249.463:5): user pid=2614 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=DESKJET_3820 uri=hp:/usb/DeskJet_3820?serial=BR37B1H0P218 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=gandalf.bogado.net, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1211979249.589:6): user pid=2614 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp_color_LaserJet_2550_series uri=hp:/usb/hp_color_LaserJet_2550_series?serial=00CNGHH14079 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=gandalf.bogado.net, addr=127.0.0.1, terminal=? res=success)'
>type=USER_AUTH msg=audit(1211979267.937:7): user pid=3005 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="anuska" exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:200.20.112.130, addr=::ffff:200.20.112.130, terminal=dovecot res=success)'
>type=USER_ACCT msg=audit(1211979267.942:8): user pid=3005 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="anuska" exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:200.20.112.130, addr=::ffff:200.20.112.130, terminal=dovecot res=success)'
>type=USER_LOGIN msg=audit(1211979372.288:9): user pid=3011 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="bogado": exe="/usr/sbin/sshd" (hostname=?, addr=139.82.86.2, terminal=sshd res=failed)'
>type=USER_ACCT msg=audit(1211979372.418:10): user pid=3011 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bogado" exe="/usr/sbin/sshd" (hostname=139.82.86.2, addr=139.82.86.2, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1211979372.472:11): user pid=3011 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bogado" exe="/usr/sbin/sshd" (hostname=139.82.86.2, addr=139.82.86.2, terminal=ssh res=success)'
>type=LOGIN msg=audit(1211979372.498:12): login pid=3011 uid=0 old auid=4294967295 new auid=1000 old ses=4294967295 new ses=1
>type=USER_START msg=audit(1211979372.499:13): user pid=3011 uid=0 auid=1000 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="bogado" exe="/usr/sbin/sshd" (hostname=139.82.86.2, addr=139.82.86.2, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1211979372.502:14): user pid=3015 uid=0 auid=1000 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bogado" exe="/usr/sbin/sshd" (hostname=139.82.86.2, addr=139.82.86.2, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1211979372.588:15): user pid=3011 uid=0 auid=1000 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=1000: exe="/usr/sbin/sshd" (hostname=139.82.86.2, addr=139.82.86.2, terminal=/dev/pts/1 res=success)'
>type=USER_AUTH msg=audit(1211979393.432:16): user pid=3073 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="bogado" exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:139.82.86.2, addr=::ffff:139.82.86.2, terminal=dovecot res=success)'
>type=USER_ACCT msg=audit(1211979393.438:17): user pid=3073 uid=0 auid=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="bogado" exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:139.82.86.2, addr=::ffff:139.82.86.2, terminal=dovecot res=success)'
>type=SELINUX_ERR msg=audit(1211979420.164:18): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211979420.164:18): arch=c000003e syscall=59 success=no exit=-13 a0=24be360 a1=24c0610 a2=24c01a0 a3=8 items=0 ppid=3087 pid=3088 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_AUTH msg=audit(1211979470.402:19): user pid=3201 uid=1000 auid=1000 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1211979470.408:20): user pid=3201 uid=1000 auid=1000 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1211979470.429:21): user pid=3201 uid=1000 auid=1000 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1211979470.430:22): user pid=3201 uid=1000 auid=1000 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1211979601.380:23): user pid=3282 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211979601.383:24): user pid=3282 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211979601.384:25): login pid=3282 uid=0 old auid=4294967295 new auid=1001 old ses=4294967295 new ses=2
>type=USER_ACCT msg=audit(1211979601.385:26): user pid=3283 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211979601.387:27): user pid=3283 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211979601.388:28): login pid=3283 uid=0 old auid=4294967295 new auid=1000 old ses=4294967295 new ses=3
>type=USER_START msg=audit(1211979601.391:29): user pid=3282 uid=0 auid=1001 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="anuska" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1211979601.403:30): user pid=3283 uid=0 auid=1000 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="bogado" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1211979661.468:31): user pid=3294 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1211979661.470:32): user pid=3294 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1211979661.471:33): login pid=3294 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4
>type=USER_START msg=audit(1211979661.477:34): user pid=3294 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1211979661.568:35): user pid=3294 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1211979661.568:36): user pid=3294 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=SELINUX_ERR msg=audit(1211979788.210:37): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211979788.210:37): arch=c000003e syscall=59 success=no exit=-13 a0=210c360 a1=210e610 a2=210e1a0 a3=8 items=0 ppid=3376 pid=3377 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211979914.562:38): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211979914.562:38): arch=c000003e syscall=59 success=no exit=-13 a0=13f0360 a1=13f2600 a2=13f3030 a3=8 items=0 ppid=3424 pid=3425 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1211981394.560:39): security_compute_sid:  invalid context system_u:system_r:spamc_t:s0 for scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1211981394.560:39): arch=c000003e syscall=59 success=no exit=-13 a0=da9360 a1=dab690 a2=dac0f0 a3=8 items=0 ppid=3494 pid=3495 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=12 fsgid=1000 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)

Actions: View

Attachments on bug 448527: 306934