Attachment 581712 Details for Bug 818123 – audit.log

audit.log

audit.log (text/plain), 62.05 KB, created by dezent on 2012-05-02 20:15:28 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: dezent

Created: 2012-05-02 20:15:28 UTC

Size: 62.05 KB

patch

obsolete

>type=DAEMON_START msg=audit(1335953361.672:7548): auditd start, ver=2.1.3 format=raw kernel=3.1.0-7.fc16.x86_64 auid=4294967295 pid=804 subj=system_u:system_r:auditd_t:s0 res=success
>type=SERVICE_START msg=audit(1335953361.804:4): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="system-setup-keyboard" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335953361.816:5): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="console-kit-log-system-start" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335953361.818:6): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="alsa-restore" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1335953361.818:7): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="alsa-restore" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=NETFILTER_CFG msg=audit(1335953361.819:8): table=filter family=10 entries=0
>type=SYSCALL msg=audit(1335953361.819:8): arch=c000003e syscall=175 success=yes exit=0 a0=25c2390 a1=1830 a2=25be590 a3=0 items=0 ppid=852 pid=855 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=SERVICE_START msg=audit(1335953361.820:9): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="livesys" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335953361.821:10): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="auditd" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335953361.827:11): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="mcelog" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335953361.865:12): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="crond" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335953361.875:13): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="irqbalance" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1335953361.875:14): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="irqbalance" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=NETFILTER_CFG msg=audit(1335953361.875:15): table=filter family=2 entries=4
>type=SERVICE_START msg=audit(1335953361.876:16): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="abrt-ccpp" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1335953361.886:17): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="systemd-kmsg-syslogd" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335953361.891:18): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="rsyslog" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=NETFILTER_CFG msg=audit(1335953361.932:19): table=filter family=10 entries=4
>type=SERVICE_START msg=audit(1335953362.065:20): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="dbus" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335953362.075:21): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="iptables" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335953362.075:22): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="ip6tables" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335953362.079:23): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="nfs-idmap" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335953362.079:24): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="sandbox" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335953362.093:25): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="avahi-daemon" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335953362.095:26): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="systemd-logind" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335953362.095:27): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="abrtd" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335953362.114:28): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="abrt-vmcore" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335953362.121:29): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="plymouth-quit-wait" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1335953362.121:30): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="plymouth-quit-wait" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335953362.291:31): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="NetworkManager" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335953362.295:32): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="lldpad" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335953362.341:33): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="rpcbind" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335953362.383:34): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="netfs" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335953362.470:35): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="systemd-user-sessions" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335953362.575:36): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="fcoe" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335953362.670:37): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="iscsid" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1335953362.672:38): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="iscsid" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335953362.858:39): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="nfs-lock" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335953363.474:40): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="sshd-keygen" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335953372.294:41): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="iscsi" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335953372.316:42): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="livesys-late" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SYSTEM_BOOT msg=audit(1335953372.332:43): user pid=1026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='init: exe="/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success'
>type=SYSTEM_RUNLEVEL msg=audit(1335953372.334:44): user pid=1026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='old-level=N new-level=5: exe="/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335953372.334:45): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="systemd-update-utmp-runlevel" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1335953372.334:46): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="systemd-update-utmp-runlevel" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335953382.321:47): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="systemd-readahead-done" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1335953382.321:48): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="systemd-readahead-done" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335953537.027:49): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="chronyd" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=USYS_CONFIG msg=audit(1335953538.500:50): user pid=1100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:firstboot_t:s0 msg='changing system time: exe="/sbin/hwclock" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335946346.212:51): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="firstboot-graphical" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335946346.217:52): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="prefdm" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=USER_AUTH msg=audit(1335946352.441:53): user pid=1106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="anders" exe="/usr/sbin/lxdm-binary" hostname=? addr=? terminal=? res=success'
>type=USER_ACCT msg=audit(1335946352.443:54): user pid=1106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="anders" exe="/usr/sbin/lxdm-binary" hostname=? addr=? terminal=? res=success'
>type=LOGIN msg=audit(1335946352.446:55): login pid=1106 uid=0 old auid=4294967295 new auid=1000 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1335946352.485:56): user pid=1106 uid=0 auid=1000 ses=1 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/sbin/lxdm-binary" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1335946352.518:57): user pid=1106 uid=0 auid=1000 ses=1 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="anders" exe="/usr/sbin/lxdm-binary" hostname=? addr=? terminal=tty1 res=success'
>type=SERVICE_START msg=audit(1335946352.540:58): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="console-kit-daemon" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335946353.453:59): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="rtkit-daemon" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335946354.129:60): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="cups" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=USER_AUTH msg=audit(1335946805.826:61): user pid=1503 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" hostname=? addr=? terminal=pts/0 res=success'
>type=USER_ACCT msg=audit(1335946805.828:62): user pid=1503 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" hostname=? addr=? terminal=pts/0 res=success'
>type=CRED_ACQ msg=audit(1335946805.836:63): user pid=1503 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" hostname=? addr=? terminal=pts/0 res=success'
>type=USER_START msg=audit(1335946805.856:64): user pid=1503 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" hostname=? addr=? terminal=pts/0 res=success'
>type=SERVICE_START msg=audit(1335947057.445:65): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="systemd-tmpfiles-clean" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1335947057.445:66): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="systemd-tmpfiles-clean" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=ADD_GROUP msg=audit(1335947119.445:67): user pid=2589 uid=0 auid=1000 ses=1 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding group acct="apache" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'
>type=ADD_USER msg=audit(1335947119.455:68): user pid=2589 uid=0 auid=1000 ses=1 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=48 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'
>type=ADD_GROUP msg=audit(1335947122.875:69): user pid=2674 uid=0 auid=1000 ses=1 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=38 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'
>type=ADD_GROUP msg=audit(1335947122.877:70): user pid=2674 uid=0 auid=1000 ses=1 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=38 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'
>type=ADD_GROUP msg=audit(1335947122.877:71): user pid=2674 uid=0 auid=1000 ses=1 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op= id=38 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'
>type=ADD_USER msg=audit(1335947122.893:72): user pid=2678 uid=0 auid=1000 ses=1 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=38 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'
>type=ADD_GROUP msg=audit(1335947125.411:73): user pid=2795 uid=0 auid=1000 ses=1 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=96 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'
>type=ADD_GROUP msg=audit(1335947125.413:74): user pid=2795 uid=0 auid=1000 ses=1 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=96 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'
>type=ADD_GROUP msg=audit(1335947125.413:75): user pid=2795 uid=0 auid=1000 ses=1 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op= id=96 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'
>type=ADD_USER msg=audit(1335947125.430:76): user pid=2799 uid=0 auid=1000 ses=1 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=96 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'
>type=ADD_GROUP msg=audit(1335947129.632:77): user pid=3343 uid=0 auid=1000 ses=1 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=91 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'
>type=ADD_GROUP msg=audit(1335947129.634:78): user pid=3343 uid=0 auid=1000 ses=1 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=91 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'
>type=ADD_GROUP msg=audit(1335947129.634:79): user pid=3343 uid=0 auid=1000 ses=1 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op= id=91 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'
>type=ADD_USER msg=audit(1335947129.651:80): user pid=3347 uid=0 auid=1000 ses=1 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=91 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'
>type=USER_AUTH msg=audit(1335948058.672:81): user pid=3929 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="anders" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success'
>type=USER_AUTH msg=audit(1335948066.217:82): user pid=3931 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/userhelper" hostname=? addr=? terminal=pts/0 res=success'
>type=USER_ACCT msg=audit(1335948066.218:83): user pid=3931 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/userhelper" hostname=? addr=? terminal=pts/0 res=success'
>type=SERVICE_START msg=audit(1335948066.249:84): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="fedora-readonly" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1335948066.251:85): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="fedora-readonly" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335948066.266:86): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="sshd-keygen" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1335948066.267:87): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="sshd-keygen" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335948066.289:88): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="abrt-vmcore" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1335948066.291:89): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="abrt-vmcore" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1335948066.307:90): user pid=1106 uid=0 auid=1000 ses=1 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="anders" exe="/usr/sbin/lxdm-binary" hostname=? addr=? terminal=tty1 res=success'
>type=USER_END msg=audit(1335948066.329:91): user pid=1503 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" hostname=? addr=? terminal=pts/0 res=success'
>type=CRED_DISP msg=audit(1335948066.330:92): user pid=1503 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" hostname=? addr=? terminal=pts/0 res=success'
>type=SERVICE_START msg=audit(1335948066.333:93): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="atd" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1335948066.335:94): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="atd" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335948066.336:95): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="abrt-oops" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1335948066.336:96): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="abrt-oops" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335948066.336:97): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="systemd-logind" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1335948066.336:98): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="systemd-logind" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335948066.338:99): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="mcelog" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1335948066.338:100): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="mcelog" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335948066.338:101): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="nfs-idmap" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1335948066.339:102): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="nfs-idmap" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335948066.341:103): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="crond" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=DAEMON_END msg=audit(1335948066.375:7549): auditd normal halt, sending auid=? pid=? subj=? res=success
>type=DAEMON_START msg=audit(1335995857.545:3774): auditd start, ver=2.1.3 format=raw kernel=3.1.0-7.fc16.x86_64 auid=4294967295 pid=770 subj=system_u:system_r:auditd_t:s0 res=success
>type=NETFILTER_CFG msg=audit(1335995857.713:4): table=filter family=10 entries=0
>type=SYSCALL msg=audit(1335995857.713:4): arch=c000003e syscall=175 success=yes exit=0 a0=19cd390 a1=1830 a2=19c9590 a3=0 items=0 ppid=812 pid=813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=NETFILTER_CFG msg=audit(1335995857.762:5): table=filter family=2 entries=4
>type=SERVICE_START msg=audit(1335995857.763:6): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="system-setup-keyboard" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=NETFILTER_CFG msg=audit(1335995857.777:7): table=filter family=10 entries=4
>type=SERVICE_START msg=audit(1335995857.777:8): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="console-kit-log-system-start" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335995857.779:9): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="alsa-restore" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1335995857.779:10): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="alsa-restore" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335995857.781:11): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="livesys" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335995857.783:12): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="auditd" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335995857.787:13): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="mcelog" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335995857.790:14): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="sshd-keygen" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335995857.790:15): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="irqbalance" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1335995857.790:16): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="irqbalance" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335995857.816:17): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="crond" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335995857.822:18): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="iptables" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335995857.822:19): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="ip6tables" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1335995857.835:20): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="systemd-kmsg-syslogd" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335995857.860:21): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="rsyslog" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335995857.864:22): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="nfs-idmap" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335995857.866:23): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="abrt-ccpp" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335995857.876:24): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="sandbox" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335995858.061:25): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="dbus" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335995858.074:26): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="systemd-logind" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335995858.074:27): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="avahi-daemon" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335995858.074:28): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="abrtd" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335995858.082:29): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="abrt-vmcore" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335995858.119:30): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="chronyd" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335995858.279:31): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="NetworkManager" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335995858.285:32): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="lldpad" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335995858.387:33): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="rpcbind" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335995858.508:34): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="iscsid" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1335995858.510:35): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="iscsid" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335995858.510:36): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="fcoe" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335995858.522:37): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="netfs" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335995858.547:38): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="systemd-user-sessions" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335995858.711:39): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="nfs-lock" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335995861.302:40): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="iscsi" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335995861.354:41): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="livesys-late" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335995861.362:42): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="prefdm" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SYSTEM_BOOT msg=audit(1335995861.370:43): user pid=951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='init: exe="/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success'
>type=SYSTEM_RUNLEVEL msg=audit(1335995861.372:44): user pid=951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='old-level=N new-level=5: exe="/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335995861.376:45): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="systemd-update-utmp-runlevel" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1335995861.376:46): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="systemd-update-utmp-runlevel" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335995861.401:47): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="plymouth-quit-wait" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1335995861.401:48): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="plymouth-quit-wait" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335995871.362:49): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="systemd-readahead-done" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1335995871.362:50): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="systemd-readahead-done" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=USER_AUTH msg=audit(1335988683.500:51): user pid=952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="anders" exe="/usr/sbin/lxdm-binary" hostname=? addr=? terminal=? res=success'
>type=USER_ACCT msg=audit(1335988683.500:52): user pid=952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="anders" exe="/usr/sbin/lxdm-binary" hostname=? addr=? terminal=? res=success'
>type=LOGIN msg=audit(1335988683.504:53): login pid=952 uid=0 old auid=4294967295 new auid=1000 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1335988683.546:54): user pid=952 uid=0 auid=1000 ses=1 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/sbin/lxdm-binary" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1335988683.578:55): user pid=952 uid=0 auid=1000 ses=1 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="anders" exe="/usr/sbin/lxdm-binary" hostname=? addr=? terminal=tty1 res=success'
>type=SERVICE_START msg=audit(1335988683.615:56): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="console-kit-daemon" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335988685.008:57): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="rtkit-daemon" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335988686.394:58): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="cups" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=USER_AUTH msg=audit(1335988768.260:59): user pid=1406 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" hostname=? addr=? terminal=pts/0 res=success'
>type=USER_ACCT msg=audit(1335988768.262:60): user pid=1406 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" hostname=? addr=? terminal=pts/0 res=success'
>type=CRED_ACQ msg=audit(1335988768.263:61): user pid=1406 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" hostname=? addr=? terminal=pts/0 res=success'
>type=USER_START msg=audit(1335988768.286:62): user pid=1406 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" hostname=? addr=? terminal=pts/0 res=success'
>type=USER_ACCT msg=audit(1335988861.658:63): user pid=1474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1335988861.658:64): user pid=1474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1335988861.658:65): login pid=1474 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_START msg=audit(1335988861.663:66): user pid=1474 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_REFR msg=audit(1335988861.663:67): user pid=1474 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1335988861.708:68): user pid=1474 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1335988861.708:69): user pid=1474 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=ADD_GROUP msg=audit(1335989017.701:70): user pid=1503 uid=0 auid=1000 ses=1 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=25 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'
>type=ADD_GROUP msg=audit(1335989017.703:71): user pid=1503 uid=0 auid=1000 ses=1 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=25 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'
>type=ADD_GROUP msg=audit(1335989017.703:72): user pid=1503 uid=0 auid=1000 ses=1 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op= id=25 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'
>type=ADD_USER msg=audit(1335989017.728:73): user pid=1507 uid=0 auid=1000 ses=1 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=25 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'
>type=USER_AUTH msg=audit(1335989174.757:74): user pid=1753 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/userhelper" hostname=? addr=? terminal=pts/0 res=success'
>type=USER_ACCT msg=audit(1335989174.757:75): user pid=1753 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/userhelper" hostname=? addr=? terminal=pts/0 res=success'
>type=SERVICE_START msg=audit(1335989174.799:76): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="fedora-readonly" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1335989174.802:77): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="fedora-readonly" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335989174.839:78): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="sshd-keygen" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1335989174.841:79): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="sshd-keygen" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1335989174.857:80): user pid=952 uid=0 auid=1000 ses=1 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="anders" exe="/usr/sbin/lxdm-binary" hostname=? addr=? terminal=tty1 res=success'
>type=SERVICE_START msg=audit(1335989174.867:81): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="abrt-vmcore" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1335989174.869:82): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="abrt-vmcore" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1335989174.885:83): user pid=1406 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" hostname=? addr=? terminal=pts/0 res=success'
>type=CRED_DISP msg=audit(1335989174.888:84): user pid=1406 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" hostname=? addr=? terminal=pts/0 res=success'
>type=SERVICE_START msg=audit(1335989174.905:85): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="atd" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1335989174.907:86): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="atd" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335989174.909:87): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="abrtd" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1335989174.909:88): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="abrtd" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335989174.909:89): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="abrt-oops" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1335989174.910:90): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="abrt-oops" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335989174.910:91): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="systemd-logind" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1335989174.911:92): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="systemd-logind" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335989174.912:93): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="mcelog" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1335989174.913:94): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="mcelog" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335989174.914:95): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="crond" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1335989174.914:96): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="crond" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335989174.914:97): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="rsyslog" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1335989174.915:98): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="rsyslog" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335989174.915:99): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="nfs-idmap" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1335989174.916:100): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="nfs-idmap" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335989174.916:101): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="chronyd" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1335989174.916:102): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="chronyd" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335989174.917:103): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="fcoe" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1335989174.918:104): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="fcoe" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335989174.926:105): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="console-kit-daemon" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1335989174.926:106): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="console-kit-daemon" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335989174.928:107): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="rtkit-daemon" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1335989174.931:108): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="rtkit-daemon" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335989174.932:109): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="cups" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1335989174.934:110): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="cups" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335989174.934:111): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="avahi-daemon" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1335989174.934:112): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="avahi-daemon" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335989174.943:113): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="systemd-kmsg-syslogd" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=DAEMON_END msg=audit(1335989174.957:3775): auditd normal halt, sending auid=0 pid=1 subj=system_u:system_r:init_t:s0 res=success
>type=DAEMON_START msg=audit(1335996397.697:5340): auditd start, ver=2.1.3 format=raw kernel=3.1.0-7.fc16.x86_64 auid=4294967295 pid=783 subj=system_u:system_r:auditd_t:s0 res=success
>type=SERVICE_START msg=audit(1335996397.846:4): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="system-setup-keyboard" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335996397.860:5): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="console-kit-log-system-start" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335996397.860:6): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="alsa-restore" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1335996397.860:7): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="alsa-restore" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335996397.861:8): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="livesys" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335996397.863:9): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="auditd" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335996397.869:10): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="mcelog" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335996397.869:11): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="sshd-keygen" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=NETFILTER_CFG msg=audit(1335996397.885:12): table=filter family=10 entries=0
>type=SYSCALL msg=audit(1335996397.885:12): arch=c000003e syscall=175 success=yes exit=0 a0=1c2a390 a1=1830 a2=1c26590 a3=0 items=0 ppid=831 pid=833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=SERVICE_START msg=audit(1335996397.907:13): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="crond" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335996397.914:14): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="irqbalance" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1335996397.914:15): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="irqbalance" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=NETFILTER_CFG msg=audit(1335996397.916:16): table=filter family=2 entries=4
>type=SERVICE_STOP msg=audit(1335996397.924:17): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="systemd-kmsg-syslogd" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335996397.930:18): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="rsyslog" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=NETFILTER_CFG msg=audit(1335996397.955:19): table=filter family=10 entries=4
>type=SERVICE_START msg=audit(1335996397.968:20): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="ip6tables" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335996398.136:21): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="dbus" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335996398.145:22): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="iptables" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335996398.146:23): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="nfs-idmap" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335996398.151:24): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="abrt-ccpp" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335996398.153:25): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="sandbox" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335996398.167:26): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="systemd-logind" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335996398.167:27): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="avahi-daemon" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335996398.167:28): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="abrtd" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335996398.188:29): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="abrt-vmcore" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335996398.243:30): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="chronyd" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335996398.366:31): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="NetworkManager" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335996398.374:32): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="lldpad" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335996398.474:33): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="rpcbind" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335996398.560:34): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="netfs" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335996398.575:35): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="systemd-user-sessions" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335996398.586:36): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="fcoe" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335996398.708:37): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="iscsid" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1335996398.708:38): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="iscsid" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335996398.762:39): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="nfs-lock" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335996411.187:40): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="iscsi" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335996411.213:41): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="livesys-late" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335996411.221:42): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="prefdm" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SYSTEM_BOOT msg=audit(1335996411.225:43): user pid=963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='init: exe="/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success'
>type=SYSTEM_RUNLEVEL msg=audit(1335996411.227:44): user pid=963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='old-level=N new-level=5: exe="/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335996411.227:45): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="systemd-update-utmp-runlevel" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1335996411.227:46): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="systemd-update-utmp-runlevel" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335996411.280:47): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="plymouth-quit-wait" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1335996411.280:48): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="plymouth-quit-wait" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=USER_AUTH msg=audit(1335996417.573:49): user pid=964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="anders" exe="/usr/sbin/lxdm-binary" hostname=? addr=? terminal=? res=success'
>type=USER_ACCT msg=audit(1335996417.575:50): user pid=964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="anders" exe="/usr/sbin/lxdm-binary" hostname=? addr=? terminal=? res=success'
>type=LOGIN msg=audit(1335996417.577:51): login pid=964 uid=0 old auid=4294967295 new auid=1000 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1335996417.616:52): user pid=964 uid=0 auid=1000 ses=1 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/sbin/lxdm-binary" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1335996417.644:53): user pid=964 uid=0 auid=1000 ses=1 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="anders" exe="/usr/sbin/lxdm-binary" hostname=? addr=? terminal=tty1 res=success'
>type=SERVICE_START msg=audit(1335996417.674:54): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="console-kit-daemon" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335989217.115:55): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="cups" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335989219.338:56): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="systemd-readahead-done" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1335989219.338:57): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="systemd-readahead-done" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=USER_AUTH msg=audit(1335989292.895:58): user pid=1423 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" hostname=? addr=? terminal=pts/0 res=success'
>type=USER_ACCT msg=audit(1335989292.895:59): user pid=1423 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" hostname=? addr=? terminal=pts/0 res=success'
>type=CRED_ACQ msg=audit(1335989292.897:60): user pid=1423 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" hostname=? addr=? terminal=pts/0 res=success'
>type=USER_START msg=audit(1335989292.923:61): user pid=1423 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" hostname=? addr=? terminal=pts/0 res=success'
>type=ADD_GROUP msg=audit(1335989321.351:62): user pid=1481 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=993 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=pts/0 res=success'
>type=ADD_GROUP msg=audit(1335989321.355:63): user pid=1481 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=993 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=pts/0 res=success'
>type=ADD_GROUP msg=audit(1335989321.355:64): user pid=1481 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op= id=993 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=pts/0 res=success'
>type=SERVICE_START msg=audit(1335989321.445:65): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="ntpd" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335989321.447:66): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="chronyd" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1335989321.447:67): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="chronyd" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=ADD_USER msg=audit(1335989321.494:68): user pid=1496 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=adding user id=996 exe="/usr/sbin/useradd" hostname=? addr=? terminal=pts/0 res=success'
>type=MAC_POLICY_LOAD msg=audit(1335989334.234:69): policy loaded auid=1000 ses=1
>type=SYSCALL msg=audit(1335989334.234:69): arch=c000003e syscall=1 success=yes exit=2179148 a0=4 a1=7f23af5a5000 a2=21404c a3=7fff43a3c320 items=0 ppid=1562 pid=1563 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=1 comm="load_policy" exe="/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=SERVICE_START msg=audit(1335989335.367:70): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="dirsrv@PKI-IPA" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335989338.519:71): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="dirsrv@PKI-IPA" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1335989338.519:72): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="dirsrv@PKI-IPA" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1335989338.563:73): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="dirsrv@PKI-IPA" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'
>type=ADD_GROUP msg=audit(1335989338.640:74): user pid=1627 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=adding group acct="pkiuser" exe="/usr/sbin/useradd" hostname=? addr=? terminal=pts/0 res=success'
>type=ADD_USER msg=audit(1335989338.651:75): user pid=1627 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=adding user id=995 exe="/usr/sbin/useradd" hostname=? addr=? terminal=pts/0 res=success'
>type=SERVICE_START msg=audit(1335989340.512:76): user pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=': comm="pki-cad@pki-ca" exe="/bin/systemd" hostname=? addr=? terminal=? res=failed'

Actions: View

Attachments on bug 818123: 581554 | 581556 | 581710 | 581711 | 581712 | 582511 | 582512 | 583814 | 588537 | 590464 | 590466 | 590467