Attachment 576580 Details for Bug 760054 – AVC denials using linuxbridge plugin.

AVC denials using linuxbridge plugin.

audit-1.log (text/plain), 52.82 KB, created by Bob Kukura on 2012-04-10 20:03:29 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Bob Kukura

Created: 2012-04-10 20:03:29 UTC

Size: 52.82 KB

patch

obsolete

>type=SERVICE_START msg=audit(1334086104.758:279): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="quantum-server" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=AVC msg=audit(1334086105.245:280): avc:  denied  { name_connect } for  pid=4577 comm="python" dest=3306 scontext=system_u:system_r:quantum_t:s0 tcontext=system_u:object_r:mysqld_port_t:s0 tclass=tcp_socket
>type=SYSCALL msg=audit(1334086105.245:280): arch=c000003e syscall=42 success=yes exit=0 a0=4 a1=1569930 a2=10 a3=40 items=0 ppid=1 pid=4577 auid=4294967295 uid=164 gid=164 euid=164 suid=164 fsuid=164 egid=164 sgid=164 fsgid=164 tty=(none) ses=4294967295 comm="python" exe="/usr/bin/python" subj=system_u:system_r:quantum_t:s0 key=(null)
>type=SERVICE_START msg=audit(1334086186.429:281): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="quantum-linuxbridge-agent" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=AVC msg=audit(1334086186.544:282): avc:  denied  { execute } for  pid=4643 comm="python" name="sudo" dev="dm-1" ino=10889406 scontext=system_u:system_r:quantum_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file
>type=AVC msg=audit(1334086186.544:282): avc:  denied  { read open } for  pid=4643 comm="python" name="sudo" dev="dm-1" ino=10889406 scontext=system_u:system_r:quantum_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file
>type=AVC msg=audit(1334086186.544:282): avc:  denied  { execute_no_trans } for  pid=4643 comm="python" path="/usr/bin/sudo" dev="dm-1" ino=10889406 scontext=system_u:system_r:quantum_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1334086186.544:282): arch=c000003e syscall=59 success=yes exit=0 a0=c17bd0 a1=cceb70 a2=7fff73b170d8 a3=20 items=0 ppid=4640 pid=4643 auid=4294967295 uid=164 gid=164 euid=0 suid=0 fsuid=0 egid=164 sgid=164 fsgid=164 tty=(none) ses=4294967295 comm="sudo" exe="/usr/bin/sudo" subj=system_u:system_r:quantum_t:s0 key=(null)
>type=AVC msg=audit(1334086186.546:283): avc:  denied  { sys_resource } for  pid=4643 comm="sudo" capability=24  scontext=system_u:system_r:quantum_t:s0 tcontext=system_u:system_r:quantum_t:s0 tclass=capability
>type=AVC msg=audit(1334086186.546:283): avc:  denied  { setrlimit } for  pid=4643 comm="sudo" scontext=system_u:system_r:quantum_t:s0 tcontext=system_u:system_r:quantum_t:s0 tclass=process
>type=SYSCALL msg=audit(1334086186.546:283): arch=c000003e syscall=160 success=yes exit=0 a0=6 a1=7fffeda64270 a2=0 a3=8 items=0 ppid=4640 pid=4643 auid=4294967295 uid=164 gid=164 euid=0 suid=0 fsuid=0 egid=164 sgid=164 fsgid=164 tty=(none) ses=4294967295 comm="sudo" exe="/usr/bin/sudo" subj=system_u:system_r:quantum_t:s0 key=(null)
>type=AVC msg=audit(1334086186.548:284): avc:  denied  { setuid } for  pid=4643 comm="sudo" capability=7  scontext=system_u:system_r:quantum_t:s0 tcontext=system_u:system_r:quantum_t:s0 tclass=capability
>type=SYSCALL msg=audit(1334086186.548:284): arch=c000003e syscall=117 success=yes exit=0 a0=0 a1=ffffffff a2=ffffffff a3=0 items=0 ppid=4640 pid=4643 auid=4294967295 uid=0 gid=164 euid=0 suid=0 fsuid=0 egid=164 sgid=164 fsgid=164 tty=(none) ses=4294967295 comm="sudo" exe="/usr/bin/sudo" subj=system_u:system_r:quantum_t:s0 key=(null)
>type=AVC msg=audit(1334086186.548:285): avc:  denied  { setgid } for  pid=4643 comm="sudo" capability=6  scontext=system_u:system_r:quantum_t:s0 tcontext=system_u:system_r:quantum_t:s0 tclass=capability
>type=SYSCALL msg=audit(1334086186.548:285): arch=c000003e syscall=119 success=yes exit=0 a0=ffffffff a1=0 a2=ffffffff a3=0 items=0 ppid=4640 pid=4643 auid=4294967295 uid=0 gid=164 euid=0 suid=0 fsuid=0 egid=0 sgid=164 fsgid=0 tty=(none) ses=4294967295 comm="sudo" exe="/usr/bin/sudo" subj=system_u:system_r:quantum_t:s0 key=(null)
>type=AVC msg=audit(1334086186.548:286): avc:  denied  { search } for  pid=4643 comm="sudo" name="kernel" dev="proc" ino=9840 scontext=system_u:system_r:quantum_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir
>type=AVC msg=audit(1334086186.548:286): avc:  denied  { read } for  pid=4643 comm="sudo" name="ngroups_max" dev="proc" ino=14356 scontext=system_u:system_r:quantum_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file
>type=AVC msg=audit(1334086186.548:286): avc:  denied  { open } for  pid=4643 comm="sudo" name="ngroups_max" dev="proc" ino=14356 scontext=system_u:system_r:quantum_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file
>type=SYSCALL msg=audit(1334086186.548:286): arch=c000003e syscall=2 success=yes exit=5 a0=7f8f00fbcec5 a1=0 a2=0 a3=7f8f00f75680 items=0 ppid=4640 pid=4643 auid=4294967295 uid=164 gid=164 euid=0 suid=0 fsuid=0 egid=0 sgid=164 fsgid=0 tty=(none) ses=4294967295 comm="sudo" exe="/usr/bin/sudo" subj=system_u:system_r:quantum_t:s0 key=(null)
>type=AVC msg=audit(1334086186.551:287): avc:  denied  { create } for  pid=4643 comm="sudo" scontext=system_u:system_r:quantum_t:s0 tcontext=system_u:system_r:quantum_t:s0 tclass=netlink_audit_socket
>type=SYSCALL msg=audit(1334086186.551:287): arch=c000003e syscall=41 success=yes exit=4 a0=10 a1=3 a2=9 a3=7fffeda63e40 items=0 ppid=4640 pid=4643 auid=4294967295 uid=164 gid=164 euid=0 suid=0 fsuid=0 egid=164 sgid=164 fsgid=164 tty=(none) ses=4294967295 comm="sudo" exe="/usr/bin/sudo" subj=system_u:system_r:quantum_t:s0 key=(null)
>type=AVC msg=audit(1334086186.551:288): avc:  denied  { nlmsg_relay } for  pid=4643 comm="sudo" scontext=system_u:system_r:quantum_t:s0 tcontext=system_u:system_r:quantum_t:s0 tclass=netlink_audit_socket
>type=AVC msg=audit(1334086186.551:288): avc:  denied  { audit_write } for  pid=4643 comm="sudo" capability=29  scontext=system_u:system_r:quantum_t:s0 tcontext=system_u:system_r:quantum_t:s0 tclass=capability
>type=USER_CMD msg=audit(1334086186.551:289): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='cwd="/" cmd=7175616E74756D2D726F6F7477726170206970206C696E6B2073686F77206465762067772D31653731323764382D6437 terminal=? res=success'
>type=SYSCALL msg=audit(1334086186.551:288): arch=c000003e syscall=44 success=yes exit=148 a0=4 a1=7fffeda572c0 a2=94 a3=0 items=0 ppid=4640 pid=4643 auid=4294967295 uid=164 gid=164 euid=0 suid=0 fsuid=0 egid=164 sgid=164 fsgid=164 tty=(none) ses=4294967295 comm="sudo" exe="/usr/bin/sudo" subj=system_u:system_r:quantum_t:s0 key=(null)
>type=CRED_ACQ msg=audit(1334086186.552:290): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=AVC msg=audit(1334086186.552:291): avc:  denied  { write } for  pid=4644 comm="sudo" scontext=system_u:system_r:quantum_t:s0 tcontext=system_u:system_r:quantum_t:s0 tclass=key
>type=SYSCALL msg=audit(1334086186.552:291): arch=c000003e syscall=250 success=yes exit=0 a0=8 a1=fffffffc a2=fffffffd a3=0 items=0 ppid=4643 pid=4644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=164 sgid=164 fsgid=164 tty=(none) ses=4294967295 comm="sudo" exe="/usr/bin/sudo" subj=system_u:system_r:quantum_t:s0 key=(null)
>type=AVC msg=audit(1334086186.553:292): avc:  denied  { setsched } for  pid=4644 comm="sudo" scontext=system_u:system_r:quantum_t:s0 tcontext=system_u:system_r:quantum_t:s0 tclass=process
>type=SYSCALL msg=audit(1334086186.553:292): arch=c000003e syscall=141 success=yes exit=0 a0=0 a1=0 a2=0 a3=0 items=0 ppid=4643 pid=4644 auid=4294967295 uid=164 gid=164 euid=0 suid=0 fsuid=0 egid=164 sgid=164 fsgid=164 tty=(none) ses=4294967295 comm="sudo" exe="/usr/bin/sudo" subj=system_u:system_r:quantum_t:s0 key=(null)
>type=USER_START msg=audit(1334086186.553:293): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=AVC msg=audit(1334086186.706:294): avc:  denied  { execute } for  pid=4644 comm="python" name="ip" dev="dm-1" ino=10881609 scontext=system_u:system_r:quantum_t:s0 tcontext=system_u:object_r:ifconfig_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1334086186.706:294): arch=c000003e syscall=21 success=yes exit=0 a0=16f5bb0 a1=1 a2=386cfb0848 a3=7fff417ec5d0 items=0 ppid=4643 pid=4644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="python" exe="/usr/bin/python" subj=system_u:system_r:quantum_t:s0 key=(null)
>type=AVC msg=audit(1334086186.707:295): avc:  denied  { read open } for  pid=4653 comm="python" name="ip" dev="dm-1" ino=10881609 scontext=system_u:system_r:quantum_t:s0 tcontext=system_u:object_r:ifconfig_exec_t:s0 tclass=file
>type=AVC msg=audit(1334086186.707:295): avc:  denied  { execute_no_trans } for  pid=4653 comm="python" path="/usr/sbin/ip" dev="dm-1" ino=10881609 scontext=system_u:system_r:quantum_t:s0 tcontext=system_u:object_r:ifconfig_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1334086186.707:295): arch=c000003e syscall=59 success=yes exit=0 a0=16f5bb0 a1=16e5ce0 a2=7fff417ed028 a3=7fff417eba60 items=0 ppid=4644 pid=4653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:quantum_t:s0 key=(null)
>type=AVC msg=audit(1334086186.708:296): avc:  denied  { nlmsg_write } for  pid=4653 comm="ip" scontext=system_u:system_r:quantum_t:s0 tcontext=system_u:system_r:quantum_t:s0 tclass=netlink_route_socket
>type=AVC msg=audit(1334086186.708:296): avc:  denied  { net_admin } for  pid=4653 comm="ip" capability=12  scontext=system_u:system_r:quantum_t:s0 tcontext=system_u:system_r:quantum_t:s0 tclass=capability
>type=SYSCALL msg=audit(1334086186.708:296): arch=c000003e syscall=44 success=yes exit=32 a0=3 a1=7fff8fd14890 a2=20 a3=0 items=0 ppid=4644 pid=4653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:quantum_t:s0 key=(null)
>type=AVC msg=audit(1334086186.708:297): avc:  denied  { read } for  pid=4653 comm="ip" name="unix" dev="proc" ino=4026532011 scontext=system_u:system_r:quantum_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file
>type=SYSCALL msg=audit(1334086186.708:297): arch=c000003e syscall=21 success=yes exit=0 a0=7fff8fd13d00 a1=4 a2=7fff8fd13d0e a3=7fff8fd13b10 items=0 ppid=4644 pid=4653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:quantum_t:s0 key=(null)
>type=AVC msg=audit(1334086186.708:298): avc:  denied  { module_request } for  pid=4653 comm="ip" kmod="netdev-gw-1e7127d8-d7" scontext=system_u:system_r:quantum_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=system
>type=AVC msg=audit(1334086186.708:298): avc:  denied  { module_request } for  pid=4653 comm="ip" kmod="gw-1e7127d8-d7" scontext=system_u:system_r:quantum_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=system
>type=SYSCALL msg=audit(1334086186.708:298): arch=c000003e syscall=16 success=no exit=-19 a0=4 a1=8933 a2=7fff8fd13d30 a3=7fff8fd13b10 items=0 ppid=4644 pid=4653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:quantum_t:s0 key=(null)
>type=AVC msg=audit(1334086186.718:299): avc:  denied  { create } for  pid=4643 comm="sudo" scontext=system_u:system_r:quantum_t:s0 tcontext=system_u:system_r:quantum_t:s0 tclass=netlink_audit_socket
>type=SYSCALL msg=audit(1334086186.718:299): arch=c000003e syscall=41 success=yes exit=6 a0=10 a1=3 a2=9 a3=7fffeda63ed0 items=0 ppid=4640 pid=4643 auid=4294967295 uid=164 gid=164 euid=0 suid=0 fsuid=0 egid=164 sgid=164 fsgid=164 tty=(none) ses=4294967295 comm="sudo" exe="/usr/bin/sudo" subj=system_u:system_r:quantum_t:s0 key=(null)
>type=AVC msg=audit(1334086186.718:300): avc:  denied  { nlmsg_relay } for  pid=4643 comm="sudo" scontext=system_u:system_r:quantum_t:s0 tcontext=system_u:system_r:quantum_t:s0 tclass=netlink_audit_socket
>type=AVC msg=audit(1334086186.718:300): avc:  denied  { audit_write } for  pid=4643 comm="sudo" capability=29  scontext=system_u:system_r:quantum_t:s0 tcontext=system_u:system_r:quantum_t:s0 tclass=capability
>type=USER_END msg=audit(1334086186.718:301): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=SYSCALL msg=audit(1334086186.718:300): arch=c000003e syscall=44 success=yes exit=112 a0=6 a1=7fffeda59250 a2=70 a3=0 items=0 ppid=4640 pid=4643 auid=4294967295 uid=164 gid=164 euid=0 suid=0 fsuid=0 egid=164 sgid=164 fsgid=164 tty=(none) ses=4294967295 comm="sudo" exe="/usr/bin/sudo" subj=system_u:system_r:quantum_t:s0 key=(null)
>type=AVC msg=audit(1334086186.721:302): avc:  denied  { sys_resource } for  pid=4658 comm="sudo" capability=24  scontext=system_u:system_r:quantum_t:s0 tcontext=system_u:system_r:quantum_t:s0 tclass=capability
>type=SYSCALL msg=audit(1334086186.721:302): arch=c000003e syscall=160 success=yes exit=0 a0=6 a1=7fff96f9c170 a2=0 a3=8 items=0 ppid=4640 pid=4658 auid=4294967295 uid=164 gid=164 euid=0 suid=0 fsuid=0 egid=164 sgid=164 fsgid=164 tty=(none) ses=4294967295 comm="sudo" exe="/usr/bin/sudo" subj=system_u:system_r:quantum_t:s0 key=(null)
>type=AVC msg=audit(1334086186.724:303): avc:  denied  { setuid } for  pid=4658 comm="sudo" capability=7  scontext=system_u:system_r:quantum_t:s0 tcontext=system_u:system_r:quantum_t:s0 tclass=capability
>type=SYSCALL msg=audit(1334086186.724:303): arch=c000003e syscall=117 success=yes exit=0 a0=0 a1=ffffffff a2=ffffffff a3=0 items=0 ppid=4640 pid=4658 auid=4294967295 uid=0 gid=164 euid=0 suid=0 fsuid=0 egid=164 sgid=164 fsgid=164 tty=(none) ses=4294967295 comm="sudo" exe="/usr/bin/sudo" subj=system_u:system_r:quantum_t:s0 key=(null)
>type=AVC msg=audit(1334086186.724:304): avc:  denied  { setgid } for  pid=4658 comm="sudo" capability=6  scontext=system_u:system_r:quantum_t:s0 tcontext=system_u:system_r:quantum_t:s0 tclass=capability
>type=SYSCALL msg=audit(1334086186.724:304): arch=c000003e syscall=119 success=yes exit=0 a0=ffffffff a1=0 a2=ffffffff a3=0 items=0 ppid=4640 pid=4658 auid=4294967295 uid=0 gid=164 euid=0 suid=0 fsuid=0 egid=0 sgid=164 fsgid=0 tty=(none) ses=4294967295 comm="sudo" exe="/usr/bin/sudo" subj=system_u:system_r:quantum_t:s0 key=(null)
>type=AVC msg=audit(1334086186.724:305): avc:  denied  { search } for  pid=4658 comm="sudo" name="kernel" dev="proc" ino=9840 scontext=system_u:system_r:quantum_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir
>type=SYSCALL msg=audit(1334086186.724:305): arch=c000003e syscall=2 success=yes exit=5 a0=7ff0307aeec5 a1=0 a2=0 a3=7ff030767680 items=0 ppid=4640 pid=4658 auid=4294967295 uid=164 gid=164 euid=0 suid=0 fsuid=0 egid=0 sgid=164 fsgid=0 tty=(none) ses=4294967295 comm="sudo" exe="/usr/bin/sudo" subj=system_u:system_r:quantum_t:s0 key=(null)
>type=USER_CMD msg=audit(1334086186.727:306): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='cwd="/" cmd=7175616E74756D2D726F6F74777261702069702074756E746170 terminal=? res=success'
>type=CRED_ACQ msg=audit(1334086186.728:307): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1334086186.731:308): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=AVC msg=audit(1334086186.763:309): avc:  denied  { read } for  pid=4662 comm="ip" name="net" dev="sysfs" ino=4348 scontext=system_u:system_r:quantum_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1334086186.763:309): arch=c000003e syscall=257 success=yes exit=4 a0=ffffffffffffff9c a1=431f48 a2=90800 a3=0 items=0 ppid=4659 pid=4662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:quantum_t:s0 key=(null)
>type=AVC msg=audit(1334086186.763:310): avc:  denied  { read } for  pid=4662 comm="ip" name="lo" dev="sysfs" ino=4353 scontext=system_u:system_r:quantum_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file
>type=SYSCALL msg=audit(1334086186.763:310): arch=c000003e syscall=2 success=no exit=-2 a0=7fffc044b5e0 a1=0 a2=7fffc044b5fb a3=7fffc044b360 items=0 ppid=4659 pid=4662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:quantum_t:s0 key=(null)
>type=AVC msg=audit(1334086186.763:311): avc:  denied  { read } for  pid=4662 comm="ip" name="tun_flags" dev="sysfs" ino=20094 scontext=system_u:system_r:quantum_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file
>type=AVC msg=audit(1334086186.763:311): avc:  denied  { open } for  pid=4662 comm="ip" name="tun_flags" dev="sysfs" ino=20094 scontext=system_u:system_r:quantum_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file
>type=SYSCALL msg=audit(1334086186.763:311): arch=c000003e syscall=2 success=yes exit=5 a0=7fffc044b5e0 a1=0 a2=7fffc044b603 a3=431f0f items=0 ppid=4659 pid=4662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:quantum_t:s0 key=(null)
>type=USER_END msg=audit(1334086186.766:312): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1334086186.775:313): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='cwd="/" cmd=7175616E74756D2D726F6F74777261702069702074756E746170 terminal=? res=success'
>type=CRED_ACQ msg=audit(1334086186.776:314): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1334086186.777:315): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1334086186.812:316): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=AVC msg=audit(1334086188.822:317): avc:  denied  { read } for  pid=4829 comm="sudo" name="ngroups_max" dev="proc" ino=14356 scontext=system_u:system_r:quantum_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file
>type=AVC msg=audit(1334086188.822:317): avc:  denied  { open } for  pid=4829 comm="sudo" name="ngroups_max" dev="proc" ino=14356 scontext=system_u:system_r:quantum_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file
>type=SYSCALL msg=audit(1334086188.822:317): arch=c000003e syscall=2 success=yes exit=5 a0=7f47405e1ec5 a1=0 a2=0 a3=7f474059a680 items=0 ppid=4640 pid=4829 auid=4294967295 uid=164 gid=164 euid=0 suid=0 fsuid=0 egid=0 sgid=164 fsgid=0 tty=(none) ses=4294967295 comm="sudo" exe="/usr/bin/sudo" subj=system_u:system_r:quantum_t:s0 key=(null)
>type=USER_CMD msg=audit(1334086188.825:318): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='cwd="/" cmd=7175616E74756D2D726F6F7477726170206970206C696E6B2073686F77206465762067772D31653731323764382D6437 terminal=? res=success'
>type=CRED_ACQ msg=audit(1334086188.825:319): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1334086188.830:320): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1334086188.874:321): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1334086188.883:322): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='cwd="/" cmd=7175616E74756D2D726F6F74777261702069702074756E746170 terminal=? res=success'
>type=CRED_ACQ msg=audit(1334086188.884:323): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1334086188.888:324): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1334086188.926:325): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1334086188.935:326): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='cwd="/" cmd=7175616E74756D2D726F6F74777261702069702074756E746170 terminal=? res=success'
>type=CRED_ACQ msg=audit(1334086188.935:327): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1334086188.939:328): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1334086188.975:329): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1334086190.988:330): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='cwd="/" cmd=7175616E74756D2D726F6F7477726170206970206C696E6B2073686F77206465762067772D31653731323764382D6437 terminal=? res=success'
>type=CRED_ACQ msg=audit(1334086190.988:331): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1334086191.020:332): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1334086191.059:333): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1334086191.067:334): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='cwd="/" cmd=7175616E74756D2D726F6F74777261702069702074756E746170 terminal=? res=success'
>type=CRED_ACQ msg=audit(1334086191.068:335): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1334086191.068:336): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1334086191.103:337): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1334086191.112:338): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='cwd="/" cmd=7175616E74756D2D726F6F74777261702069702074756E746170 terminal=? res=success'
>type=CRED_ACQ msg=audit(1334086191.112:339): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1334086191.113:340): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1334086191.148:341): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1334086193.161:342): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='cwd="/" cmd=7175616E74756D2D726F6F7477726170206970206C696E6B2073686F77206465762067772D31653731323764382D6437 terminal=? res=success'
>type=CRED_ACQ msg=audit(1334086193.161:343): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1334086193.162:344): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1334086193.200:345): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1334086193.209:346): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='cwd="/" cmd=7175616E74756D2D726F6F74777261702069702074756E746170 terminal=? res=success'
>type=CRED_ACQ msg=audit(1334086193.209:347): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1334086193.214:348): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1334086193.249:349): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1334086193.257:350): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='cwd="/" cmd=7175616E74756D2D726F6F74777261702069702074756E746170 terminal=? res=success'
>type=CRED_ACQ msg=audit(1334086193.258:351): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1334086193.259:352): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1334086193.294:353): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=AVC msg=audit(1334086195.301:354): avc:  denied  { setrlimit } for  pid=4980 comm="sudo" scontext=system_u:system_r:quantum_t:s0 tcontext=system_u:system_r:quantum_t:s0 tclass=process
>type=SYSCALL msg=audit(1334086195.301:354): arch=c000003e syscall=160 success=yes exit=0 a0=6 a1=7fff8b25d040 a2=0 a3=8 items=0 ppid=4640 pid=4980 auid=4294967295 uid=164 gid=164 euid=0 suid=0 fsuid=0 egid=164 sgid=164 fsgid=164 tty=(none) ses=4294967295 comm="sudo" exe="/usr/bin/sudo" subj=system_u:system_r:quantum_t:s0 key=(null)
>type=USER_CMD msg=audit(1334086195.306:355): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='cwd="/" cmd=7175616E74756D2D726F6F7477726170206970206C696E6B2073686F77206465762067772D31653731323764382D6437 terminal=? res=success'
>type=CRED_ACQ msg=audit(1334086195.307:356): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=AVC msg=audit(1334086195.311:357): avc:  denied  { setsched } for  pid=4981 comm="sudo" scontext=system_u:system_r:quantum_t:s0 tcontext=system_u:system_r:quantum_t:s0 tclass=process
>type=SYSCALL msg=audit(1334086195.311:357): arch=c000003e syscall=141 success=yes exit=0 a0=0 a1=0 a2=0 a3=0 items=0 ppid=4980 pid=4981 auid=4294967295 uid=164 gid=164 euid=0 suid=0 fsuid=0 egid=164 sgid=164 fsgid=164 tty=(none) ses=4294967295 comm="sudo" exe="/usr/bin/sudo" subj=system_u:system_r:quantum_t:s0 key=(null)
>type=USER_START msg=audit(1334086195.311:358): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1334086195.350:359): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1334086195.359:360): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='cwd="/" cmd=7175616E74756D2D726F6F74777261702069702074756E746170 terminal=? res=success'
>type=CRED_ACQ msg=audit(1334086195.359:361): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1334086195.362:362): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1334086195.398:363): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1334086195.406:364): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='cwd="/" cmd=7175616E74756D2D726F6F74777261702069702074756E746170 terminal=? res=success'
>type=CRED_ACQ msg=audit(1334086195.407:365): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1334086195.409:366): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1334086195.444:367): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1334086197.457:368): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='cwd="/" cmd=7175616E74756D2D726F6F7477726170206970206C696E6B2073686F77206465762067772D31653731323764382D6437 terminal=? res=success'
>type=CRED_ACQ msg=audit(1334086197.457:369): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1334086197.458:370): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1334086197.497:371): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1334086197.505:372): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='cwd="/" cmd=7175616E74756D2D726F6F74777261702069702074756E746170 terminal=? res=success'
>type=CRED_ACQ msg=audit(1334086197.506:373): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1334086197.506:374): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1334086197.542:375): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1334086197.551:376): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='cwd="/" cmd=7175616E74756D2D726F6F74777261702069702074756E746170 terminal=? res=success'
>type=CRED_ACQ msg=audit(1334086197.551:377): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1334086197.552:378): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1334086197.588:379): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1334086199.600:380): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='cwd="/" cmd=7175616E74756D2D726F6F7477726170206970206C696E6B2073686F77206465762067772D31653731323764382D6437 terminal=? res=success'
>type=CRED_ACQ msg=audit(1334086199.601:381): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1334086199.601:382): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1334086199.640:383): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1334086199.649:384): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='cwd="/" cmd=7175616E74756D2D726F6F74777261702069702074756E746170 terminal=? res=success'
>type=CRED_ACQ msg=audit(1334086199.649:385): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1334086199.650:386): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1334086199.685:387): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1334086199.693:388): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='cwd="/" cmd=7175616E74756D2D726F6F74777261702069702074756E746170 terminal=? res=success'
>type=CRED_ACQ msg=audit(1334086199.694:389): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1334086199.695:390): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1334086199.730:391): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_ACCT msg=audit(1334086201.692:392): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1334086201.692:393): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1334086201.694:394): login pid=5089 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=11
>type=USER_START msg=audit(1334086201.716:395): pid=0 uid=0 auid=0 ses=11 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_REFR msg=audit(1334086201.716:396): pid=0 uid=0 auid=0 ses=11 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_CMD msg=audit(1334086201.742:397): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='cwd="/" cmd=7175616E74756D2D726F6F7477726170206970206C696E6B2073686F77206465762067772D31653731323764382D6437 terminal=? res=success'
>type=CRED_ACQ msg=audit(1334086201.742:398): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1334086201.746:399): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=AVC msg=audit(1334086201.778:400): avc:  denied  { nlmsg_write } for  pid=5102 comm="ip" scontext=system_u:system_r:quantum_t:s0 tcontext=system_u:system_r:quantum_t:s0 tclass=netlink_route_socket
>type=SYSCALL msg=audit(1334086201.778:400): arch=c000003e syscall=44 success=yes exit=32 a0=3 a1=7fff4bb71d90 a2=20 a3=0 items=0 ppid=5100 pid=5102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:quantum_t:s0 key=(null)
>type=USER_END msg=audit(1334086201.793:401): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1334086201.802:402): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='cwd="/" cmd=7175616E74756D2D726F6F74777261702069702074756E746170 terminal=? res=success'
>type=CRED_ACQ msg=audit(1334086201.802:403): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1334086201.809:404): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1334086201.845:405): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1334086201.853:406): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='cwd="/" cmd=7175616E74756D2D726F6F74777261702069702074756E746170 terminal=? res=success'
>type=CRED_ACQ msg=audit(1334086201.854:407): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1334086201.858:408): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1334086201.893:409): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=CRED_DISP msg=audit(1334086202.695:410): pid=0 uid=0 auid=0 ses=11 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1334086202.695:411): pid=0 uid=0 auid=0 ses=11 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_CMD msg=audit(1334086203.906:412): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='cwd="/" cmd=7175616E74756D2D726F6F7477726170206970206C696E6B2073686F77206465762067772D31653731323764382D6437 terminal=? res=success'
>type=CRED_ACQ msg=audit(1334086203.907:413): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1334086203.908:414): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=AVC msg=audit(1334086203.938:415): avc:  denied  { execute } for  pid=5127 comm="python" name="ip" dev="dm-1" ino=10881609 scontext=system_u:system_r:quantum_t:s0 tcontext=system_u:object_r:ifconfig_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1334086203.938:415): arch=c000003e syscall=21 success=yes exit=0 a0=1affbb0 a1=1 a2=386cfb0848 a3=7fff38b69820 items=0 ppid=5126 pid=5127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="python" exe="/usr/bin/python" subj=system_u:system_r:quantum_t:s0 key=(null)
>type=AVC msg=audit(1334086203.939:416): avc:  denied  { read open } for  pid=5128 comm="python" name="ip" dev="dm-1" ino=10881609 scontext=system_u:system_r:quantum_t:s0 tcontext=system_u:object_r:ifconfig_exec_t:s0 tclass=file
>type=AVC msg=audit(1334086203.939:416): avc:  denied  { execute_no_trans } for  pid=5128 comm="python" path="/usr/sbin/ip" dev="dm-1" ino=10881609 scontext=system_u:system_r:quantum_t:s0 tcontext=system_u:object_r:ifconfig_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1334086203.939:416): arch=c000003e syscall=59 success=yes exit=0 a0=1affbb0 a1=1aefce0 a2=7fff38b6a278 a3=7fff38b68cb0 items=0 ppid=5127 pid=5128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:quantum_t:s0 key=(null)
>type=AVC msg=audit(1334086203.940:417): avc:  denied  { read } for  pid=5128 comm="ip" name="unix" dev="proc" ino=4026532011 scontext=system_u:system_r:quantum_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file
>type=SYSCALL msg=audit(1334086203.940:417): arch=c000003e syscall=21 success=yes exit=0 a0=7fff91df18e0 a1=4 a2=7fff91df18ee a3=7fff91df16f0 items=0 ppid=5127 pid=5128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:quantum_t:s0 key=(null)
>type=USER_END msg=audit(1334086203.947:418): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1334086203.955:419): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='cwd="/" cmd=7175616E74756D2D726F6F74777261702069702074756E746170 terminal=? res=success'
>type=CRED_ACQ msg=audit(1334086203.956:420): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1334086203.961:421): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1334086203.997:422): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1334086204.006:423): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='cwd="/" cmd=7175616E74756D2D726F6F74777261702069702074756E746170 terminal=? res=success'
>type=CRED_ACQ msg=audit(1334086204.006:424): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1334086204.009:425): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1334086204.045:426): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1334086206.059:427): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='cwd="/" cmd=7175616E74756D2D726F6F7477726170206970206C696E6B2073686F77206465762067772D31653731323764382D6437 terminal=? res=success'
>type=CRED_ACQ msg=audit(1334086206.059:428): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1334086206.066:429): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1334086206.105:430): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1334086206.114:431): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='cwd="/" cmd=7175616E74756D2D726F6F74777261702069702074756E746170 terminal=? res=success'
>type=CRED_ACQ msg=audit(1334086206.114:432): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1334086206.115:433): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1334086206.150:434): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1334086206.158:435): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='cwd="/" cmd=7175616E74756D2D726F6F74777261702069702074756E746170 terminal=? res=success'
>type=CRED_ACQ msg=audit(1334086206.159:436): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1334086206.166:437): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1334086206.201:438): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1334086208.213:439): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='cwd="/" cmd=7175616E74756D2D726F6F7477726170206970206C696E6B2073686F77206465762067772D31653731323764382D6437 terminal=? res=success'
>type=CRED_ACQ msg=audit(1334086208.214:440): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1334086208.215:441): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1334086208.254:442): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1334086208.262:443): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='cwd="/" cmd=7175616E74756D2D726F6F74777261702069702074756E746170 terminal=? res=success'
>type=CRED_ACQ msg=audit(1334086208.263:444): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1334086208.264:445): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1334086208.299:446): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1334086208.307:447): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='cwd="/" cmd=7175616E74756D2D726F6F74777261702069702074756E746170 terminal=? res=success'
>type=CRED_ACQ msg=audit(1334086208.308:448): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1334086208.309:449): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1334086208.344:450): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1334086210.357:451): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='cwd="/" cmd=7175616E74756D2D726F6F7477726170206970206C696E6B2073686F77206465762067772D31653731323764382D6437 terminal=? res=success'
>type=CRED_ACQ msg=audit(1334086210.358:452): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1334086210.358:453): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1334086210.397:454): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1334086210.406:455): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='cwd="/" cmd=7175616E74756D2D726F6F74777261702069702074756E746170 terminal=? res=success'
>type=CRED_ACQ msg=audit(1334086210.406:456): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1334086210.407:457): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1334086210.442:458): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1334086210.451:459): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='cwd="/" cmd=7175616E74756D2D726F6F74777261702069702074756E746170 terminal=? res=success'
>type=CRED_ACQ msg=audit(1334086210.451:460): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1334086210.452:461): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1334086210.487:462): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:quantum_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'

Actions: View

Attachments on bug 760054: 576580 | 576589 | 576817