Login
[x]
Log in using an account from:
Fedora Account System
Red Hat Associate
Red Hat Customer
Or login using a Red Hat Bugzilla account
Forgot Password
Login:
Hide Forgot
Create an Account
Red Hat Bugzilla – Attachment 607160 Details for
Bug 851981
The migration with macvtap network was denied by the target when i set "setenforce 1" in the target
[?]
New
Simple Search
Advanced Search
My Links
Browse
Requests
Reports
Current State
Search
Tabular reports
Graphical reports
Duplicates
Other Reports
User Changes
Plotly Reports
Bug Status
Bug Severity
Non-Defaults
|
Product Dashboard
Help
Page Help!
Bug Writing Guidelines
What's new
Browser Support Policy
5.0.4.rh83 Release notes
FAQ
Guides index
User guide
Web Services
Contact
Legal
This site requires JavaScript to be enabled to function correctly, please enable it.
the audit log on the target
audit.log (text/plain), 2.07 MB, created by
zhenfeng wang
on 2012-08-27 08:20:00 UTC
(
hide
)
Description:
the audit log on the target
Filename:
MIME Type:
Creator:
zhenfeng wang
Created:
2012-08-27 08:20:00 UTC
Size:
2.07 MB
patch
obsolete
>type=DAEMON_START msg=audit(1345712795.478:7430): auditd start, ver=2.2 format=raw kernel=2.6.32-279.el6.x86_64 auid=4294967295 pid=8199 subj=system_u:system_r:auditd_t:s0 res=success >type=CONFIG_CHANGE msg=audit(1345712795.590:120061): audit_backlog_limit=320 old=256 auid=4294967295 ses=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CRYPTO_KEY_USER msg=audit(1345712880.086:120062): user pid=8230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8230 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345712880.086:120063): user pid=8230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8230 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345712880.088:120064): user pid=8229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=8230 suid=74 rport=42379 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345712880.088:120065): user pid=8229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=8230 suid=74 rport=42379 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1345712889.462:120066): user pid=8229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1345712892.673:120067): user pid=8229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1345712892.676:120068): user pid=8229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345712892.676:120069): user pid=8229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8230 suid=74 rport=42379 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1345712892.677:120070): user pid=8229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1345712892.677:120071): user pid=8229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1345712892.677:120072): pid=8229 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1 >type=USER_ROLE_CHANGE msg=audit(1345712892.773:120073): user pid=8229 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1345712892.776:120074): user pid=8229 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1345712892.794:120075): user pid=8233 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1345712892.795:120076): user pid=8233 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1345712892.795:120077): user pid=8233 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8233 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1345712892.795:120078): user pid=8233 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8233 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1345712892.795:120079): user pid=8233 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345712944.972:120080): user pid=8261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8261 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345712944.972:120081): user pid=8261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8261 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345712944.973:120082): user pid=8260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=8261 suid=74 rport=42386 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345712944.974:120083): user pid=8260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=8261 suid=74 rport=42386 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1345712948.494:120084): user pid=8260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1345712950.549:120085): user pid=8260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1345712950.552:120086): user pid=8260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345712950.552:120087): user pid=8260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8261 suid=74 rport=42386 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1345712950.553:120088): user pid=8260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1345712950.553:120089): user pid=8260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1345712950.553:120090): pid=8260 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2 >type=USER_ROLE_CHANGE msg=audit(1345712950.615:120091): user pid=8260 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1345712950.617:120092): user pid=8260 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1345712950.618:120093): user pid=8260 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1345712950.618:120094): user pid=8260 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345712950.619:120095): user pid=8264 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8264 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345712950.619:120096): user pid=8264 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8264 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRED_REFR msg=audit(1345712950.619:120097): user pid=8264 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=VIRT_MACHINE_ID msg=audit(1345712950.895:120098): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=system_u:system_r:svirt_t:s0:c639,c834 img-ctx=system_u:object_r:svirt_image_t:s0:c639,c834 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345712951.013:120099): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345712951.014:120100): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/mnt/testkf8.qcow2 rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1345712951.073:120101): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-disk="?" new-disk="/mnt/testkf8.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345712951.073:120102): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345712951.073:120103): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345712951.074:120104): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1345712951.074:120105): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=migrated vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=USER_END msg=audit(1345712951.281:120106): user pid=8260 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1345712951.281:120107): user pid=8260 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1345712951.281:120108): user pid=8260 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1345712951.281:120109): user pid=8260 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345712951.281:120110): user pid=8260 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8260 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345712951.281:120111): user pid=8260 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8260 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345712951.281:120112): user pid=8260 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8260 suid=0 rport=42386 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345712986.551:120113): user pid=8284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8284 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345712986.551:120114): user pid=8284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8284 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345712986.552:120115): user pid=8283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=8284 suid=74 rport=42388 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345712986.552:120116): user pid=8283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=8284 suid=74 rport=42388 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1345712990.291:120117): user pid=8283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1345712992.102:120118): user pid=8283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1345712992.105:120119): user pid=8283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345712992.106:120120): user pid=8283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8284 suid=74 rport=42388 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1345712992.106:120121): user pid=8283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1345712992.107:120122): user pid=8283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1345712992.107:120123): pid=8283 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3 >type=USER_ROLE_CHANGE msg=audit(1345712992.172:120124): user pid=8283 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1345712992.175:120125): user pid=8283 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1345712992.177:120126): user pid=8283 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1345712992.177:120127): user pid=8283 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345712992.177:120128): user pid=8293 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8293 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345712992.178:120129): user pid=8293 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8293 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRED_REFR msg=audit(1345712992.178:120130): user pid=8293 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=VIRT_MACHINE_ID msg=audit(1345712992.423:120131): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=system_u:system_r:svirt_t:s0:c780,c792 img-ctx=system_u:object_r:svirt_image_t:s0:c780,c792 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345712992.553:120132): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345712992.557:120133): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345712992.557:120134): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345712992.557:120135): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345712992.557:120136): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345712992.557:120137): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345712992.557:120138): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345712992.557:120139): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345712992.558:120140): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345712992.558:120141): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1345712992.558:120142): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345712992.558:120143): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345712992.615:120144): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-disk="?" new-disk="/mnt/testkf8.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345712992.615:120145): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345712992.615:120146): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345712992.615:120147): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1345712992.615:120148): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=migrated vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=USER_END msg=audit(1345712992.795:120149): user pid=8283 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1345712992.795:120150): user pid=8283 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1345712992.795:120151): user pid=8283 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1345712992.795:120152): user pid=8283 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345712992.795:120153): user pid=8283 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8283 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345712992.795:120154): user pid=8283 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8283 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345712992.795:120155): user pid=8283 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8283 suid=0 rport=42388 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_ACCT msg=audit(1345713001.495:120156): user pid=8308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345713001.496:120157): user pid=8308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345713001.501:120158): pid=8308 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4 >type=USER_START msg=audit(1345713001.508:120159): user pid=8308 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345713001.549:120160): user pid=8308 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345713001.549:120161): user pid=8308 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRYPTO_KEY_USER msg=audit(1345713175.500:120162): user pid=8344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8344 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345713175.500:120163): user pid=8344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8344 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345713175.501:120164): user pid=8343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=8344 suid=74 rport=42406 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345713175.501:120165): user pid=8343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=8344 suid=74 rport=42406 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1345713186.858:120166): user pid=8343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1345713190.443:120167): user pid=8343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1345713190.445:120168): user pid=8343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345713190.446:120169): user pid=8343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8344 suid=74 rport=42406 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1345713190.447:120170): user pid=8343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1345713190.447:120171): user pid=8343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1345713190.447:120172): pid=8343 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=5 >type=USER_ROLE_CHANGE msg=audit(1345713190.517:120173): user pid=8343 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1345713190.520:120174): user pid=8343 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1345713190.522:120175): user pid=8343 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1345713190.522:120176): user pid=8343 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345713190.523:120177): user pid=8347 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8347 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345713190.523:120178): user pid=8347 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8347 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRED_REFR msg=audit(1345713190.524:120179): user pid=8347 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=VIRT_MACHINE_ID msg=audit(1345713190.744:120180): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=system_u:system_r:svirt_t:s0:c250,c690 img-ctx=system_u:object_r:svirt_image_t:s0:c250,c690 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345713190.861:120181): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345713190.863:120182): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345713190.864:120183): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345713190.864:120184): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345713190.864:120185): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345713190.864:120186): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345713190.864:120187): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345713190.864:120188): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345713190.864:120189): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345713190.865:120190): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1345713190.865:120191): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345713190.865:120192): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345713190.893:120193): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="macvtap0" rdev=? exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345713190.893:120194): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1345713190.951:120195): avc: denied { read write } for pid=8367 comm="qemu-kvm" path="/dev/tap7" dev=devtmpfs ino=33380 scontext=system_u:system_r:svirt_t:s0:c250,c690 tcontext=system_u:object_r:device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1345713190.951:120195): arch=c000003e syscall=59 success=yes exit=0 a0=7fc45800a850 a1=7fc45800aa70 a2=7fc45800a130 a3=7fc470cf96f0 items=0 ppid=1 pid=8367 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=system_u:system_r:svirt_t:s0:c250,c690 key=(null) >type=VIRT_RESOURCE msg=audit(1345713191.244:120196): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-disk="?" new-disk="/mnt/testkf8.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345713191.244:120197): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345713191.244:120198): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345713191.244:120199): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1345713191.244:120200): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=migrated vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=USER_END msg=audit(1345713191.432:120201): user pid=8343 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1345713191.432:120202): user pid=8343 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1345713191.433:120203): user pid=8343 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1345713191.433:120204): user pid=8343 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345713191.433:120205): user pid=8343 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8343 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345713191.433:120206): user pid=8343 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8343 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345713191.433:120207): user pid=8343 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8343 suid=0 rport=42406 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=MAC_CONFIG_CHANGE msg=audit(1345713273.162:120208): bool=virt_use_nfs val=1 old_val=0 auid=0 ses=1 >type=SYSCALL msg=audit(1345713273.162:120208): arch=c000003e syscall=1 success=yes exit=2 a0=4 a1=7fff63d0cc40 a2=2 a3=fffffff8 items=0 ppid=8233 pid=8415 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=1 comm="setsebool" exe="/usr/sbin/setsebool" subj=unconfined_u:unconfined_r:setsebool_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1345713293.896:120209): user pid=8428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8428 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345713293.896:120210): user pid=8428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8428 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345713293.898:120211): user pid=8427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=8428 suid=74 rport=42418 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345713293.898:120212): user pid=8427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=8428 suid=74 rport=42418 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1345713298.187:120213): user pid=8427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1345713305.110:120214): user pid=8427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1345713305.112:120215): user pid=8427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345713305.113:120216): user pid=8427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8428 suid=74 rport=42418 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1345713305.113:120217): user pid=8427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1345713305.114:120218): user pid=8427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1345713305.114:120219): pid=8427 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=6 >type=USER_ROLE_CHANGE msg=audit(1345713305.182:120220): user pid=8427 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1345713305.185:120221): user pid=8427 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1345713305.187:120222): user pid=8427 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1345713305.187:120223): user pid=8427 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345713305.188:120224): user pid=8432 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8432 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345713305.188:120225): user pid=8432 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8432 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRED_REFR msg=audit(1345713305.188:120226): user pid=8432 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=VIRT_MACHINE_ID msg=audit(1345713305.441:120227): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=system_u:system_r:svirt_t:s0:c456,c703 img-ctx=system_u:object_r:svirt_image_t:s0:c456,c703 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345713305.561:120228): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345713305.564:120229): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345713305.564:120230): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345713305.564:120231): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345713305.564:120232): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345713305.564:120233): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345713305.564:120234): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345713305.565:120235): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345713305.565:120236): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345713305.565:120237): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1345713305.565:120238): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345713305.565:120239): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345713305.589:120240): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="macvtap0" rdev=? exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345713305.589:120241): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1345713305.637:120242): avc: denied { read write } for pid=8452 comm="qemu-kvm" path="/dev/tap8" dev=devtmpfs ino=34052 scontext=system_u:system_r:svirt_t:s0:c456,c703 tcontext=system_u:object_r:device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1345713305.637:120242): arch=c000003e syscall=59 success=yes exit=0 a0=7fc45c00a230 a1=7fc45c00aae0 a2=7fc45c00f410 a3=7fc472afc6f0 items=0 ppid=1 pid=8452 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=system_u:system_r:svirt_t:s0:c456,c703 key=(null) >type=VIRT_RESOURCE msg=audit(1345713305.929:120243): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-disk="?" new-disk="/mnt/testkf8.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345713305.929:120244): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345713305.929:120245): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345713305.929:120246): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1345713305.929:120247): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=migrated vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=8452 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1345713364.030:120248): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=failed vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1345713364.201:120249): user pid=8427 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1345713364.201:120250): user pid=8427 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1345713364.201:120251): user pid=8427 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1345713364.201:120252): user pid=8427 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345713364.201:120253): user pid=8427 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8427 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345713364.202:120254): user pid=8427 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8427 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345713364.202:120255): user pid=8427 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8427 suid=0 rport=42418 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345713417.647:120256): user pid=8511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8511 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345713417.647:120257): user pid=8511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8511 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345713417.648:120258): user pid=8510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=8511 suid=74 rport=42427 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345713417.648:120259): user pid=8510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=8511 suid=74 rport=42427 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1345713425.240:120260): user pid=8510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1345713427.065:120261): user pid=8510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1345713427.067:120262): user pid=8510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345713427.068:120263): user pid=8510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8511 suid=74 rport=42427 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1345713427.069:120264): user pid=8510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1345713427.069:120265): user pid=8510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1345713427.069:120266): pid=8510 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=7 >type=USER_ROLE_CHANGE msg=audit(1345713427.140:120267): user pid=8510 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1345713427.143:120268): user pid=8510 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1345713427.144:120269): user pid=8510 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1345713427.144:120270): user pid=8510 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345713427.144:120271): user pid=8514 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8514 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345713427.144:120272): user pid=8514 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8514 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRED_REFR msg=audit(1345713427.145:120273): user pid=8514 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=VIRT_MACHINE_ID msg=audit(1345713427.384:120274): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=system_u:system_r:svirt_t:s0:c371,c453 img-ctx=system_u:object_r:svirt_image_t:s0:c371,c453 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345713427.507:120275): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345713427.510:120276): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345713427.510:120277): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345713427.510:120278): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345713427.510:120279): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345713427.510:120280): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345713427.510:120281): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345713427.511:120282): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345713427.511:120283): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345713427.511:120284): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1345713427.511:120285): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345713427.511:120286): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345713427.535:120287): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="macvtap0" rdev=? exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345713427.535:120288): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345713427.858:120289): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-disk="?" new-disk="/mnt/testkf8.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345713427.858:120290): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345713427.858:120291): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345713427.858:120292): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1345713427.858:120293): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=migrated vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=8534 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1345713476.391:120294): table=filter family=2 entries=13 >type=SYSCALL msg=audit(1345713476.391:120294): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=d4cff0 items=0 ppid=8233 pid=8649 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1345713485.466:120295): user pid=8510 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1345713485.466:120296): user pid=8510 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1345713485.467:120297): user pid=8510 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1345713485.467:120298): user pid=8510 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345713485.467:120299): user pid=8510 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8510 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345713485.467:120300): user pid=8510 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8510 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345713485.467:120301): user pid=8510 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8510 suid=0 rport=42427 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345713524.639:120302): user pid=8654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8654 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345713524.640:120303): user pid=8654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8654 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345713524.640:120304): user pid=8653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=8654 suid=74 rport=42441 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345713524.640:120305): user pid=8653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=8654 suid=74 rport=42441 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1345713528.597:120306): user pid=8653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1345713530.520:120307): user pid=8653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1345713530.523:120308): user pid=8653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345713530.523:120309): user pid=8653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8654 suid=74 rport=42441 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1345713530.524:120310): user pid=8653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1345713530.524:120311): user pid=8653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1345713530.524:120312): pid=8653 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=8 >type=USER_ROLE_CHANGE msg=audit(1345713530.589:120313): user pid=8653 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1345713530.592:120314): user pid=8653 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1345713530.593:120315): user pid=8653 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1345713530.593:120316): user pid=8653 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345713530.593:120317): user pid=8663 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8663 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345713530.594:120318): user pid=8663 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8663 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRED_REFR msg=audit(1345713530.594:120319): user pid=8663 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345713534.038:120320): user pid=8687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8687 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345713534.038:120321): user pid=8687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8687 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345713534.040:120322): user pid=8686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=8687 suid=74 rport=42442 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345713534.040:120323): user pid=8686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=8687 suid=74 rport=42442 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1345713537.409:120324): user pid=8686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1345713539.021:120325): user pid=8686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1345713539.024:120326): user pid=8686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345713539.024:120327): user pid=8686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8687 suid=74 rport=42442 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1345713539.025:120328): user pid=8686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1345713539.025:120329): user pid=8686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1345713539.025:120330): pid=8686 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=9 >type=USER_ROLE_CHANGE msg=audit(1345713539.088:120331): user pid=8686 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1345713539.091:120332): user pid=8686 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1345713539.091:120333): user pid=8686 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1345713539.091:120334): user pid=8686 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345713539.092:120335): user pid=8690 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8690 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345713539.093:120336): user pid=8690 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8690 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRED_REFR msg=audit(1345713539.093:120337): user pid=8690 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1345713567.335:120338): user pid=8686 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1345713567.336:120339): user pid=8686 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1345713567.336:120340): user pid=8686 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1345713567.336:120341): user pid=8686 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345713567.336:120342): user pid=8686 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8686 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345713567.336:120343): user pid=8686 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8686 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345713567.336:120344): user pid=8686 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8686 suid=0 rport=42442 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=VIRT_CONTROL msg=audit(1345713567.574:120345): user pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1345713601.587:120346): user pid=8722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345713601.587:120347): user pid=8722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345713601.593:120348): pid=8722 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=10 >type=USER_START msg=audit(1345713601.602:120349): user pid=8722 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345713601.685:120350): user pid=8722 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345713601.686:120351): user pid=8722 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345713689.550:120352): user pid=8653 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1345713689.550:120353): user pid=8653 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1345713689.551:120354): user pid=8653 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1345713689.551:120355): user pid=8653 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345713689.551:120356): user pid=8653 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8653 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345713689.551:120357): user pid=8653 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8653 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345713689.551:120358): user pid=8653 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8653 suid=0 rport=42441 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1345713689.716:120359): table=nat family=2 entries=7 >type=SYSCALL msg=audit(1345713689.716:120359): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=2202800 items=0 ppid=8821 pid=8834 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345713689.720:120360): table=nat family=2 entries=6 >type=SYSCALL msg=audit(1345713689.720:120360): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=2313800 items=0 ppid=8821 pid=8835 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345713689.722:120361): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1345713689.722:120361): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=238e5e0 items=0 ppid=8821 pid=8836 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345713689.741:120362): table=mangle family=2 entries=7 >type=SYSCALL msg=audit(1345713689.741:120362): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=20b8290 items=0 ppid=8821 pid=8844 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345713689.748:120363): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1345713689.748:120363): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=9137f0 items=0 ppid=8821 pid=8847 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345713689.751:120364): table=filter family=2 entries=5 >type=SYSCALL msg=audit(1345713689.751:120364): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=155c7f0 items=0 ppid=8821 pid=8848 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345713689.753:120365): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1345713689.753:120365): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=a65290 items=0 ppid=8821 pid=8849 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345713689.756:120366): table=filter family=2 entries=6 >type=SYSCALL msg=audit(1345713689.756:120366): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1f36e50 items=0 ppid=8821 pid=8850 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345713689.758:120367): table=filter family=2 entries=7 >type=SYSCALL msg=audit(1345713689.758:120367): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1e59fc0 items=0 ppid=8821 pid=8851 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345713689.761:120368): table=filter family=2 entries=8 >type=SYSCALL msg=audit(1345713689.761:120368): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1ef2920 items=0 ppid=8821 pid=8852 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345713689.763:120369): table=filter family=2 entries=9 >type=SYSCALL msg=audit(1345713689.763:120369): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=6fca90 items=0 ppid=8821 pid=8853 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345713689.766:120370): table=filter family=2 entries=10 >type=SYSCALL msg=audit(1345713689.766:120370): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=12f47d0 items=0 ppid=8821 pid=8854 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345713689.768:120371): table=filter family=2 entries=11 >type=SYSCALL msg=audit(1345713689.768:120371): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=2196940 items=0 ppid=8821 pid=8855 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345713689.770:120372): table=filter family=2 entries=12 >type=SYSCALL msg=audit(1345713689.770:120372): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=725550 items=0 ppid=8821 pid=8856 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345713689.772:120373): table=nat family=2 entries=4 >type=SYSCALL msg=audit(1345713689.772:120373): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=cff620 items=0 ppid=8821 pid=8857 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345713689.775:120374): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1345713689.775:120374): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=739800 items=0 ppid=8821 pid=8858 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345713689.777:120375): table=nat family=2 entries=6 >type=SYSCALL msg=audit(1345713689.777:120375): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1eec700 items=0 ppid=8821 pid=8859 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345713690.210:120376): table=filter family=10 entries=0 >type=NETFILTER_CFG msg=audit(1345713690.210:120376): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1345713690.210:120376): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1345713690.210:120376): table=mangle family=2 entries=0 >type=SYSCALL msg=audit(1345713690.210:120376): arch=c000003e syscall=56 success=yes exit=8906 a0=6c020011 a1=7f5e6c0cfdf0 a2=8 a3=7f5e740a7373 items=0 ppid=1 pid=8832 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=SYSCALL msg=audit(1345713690.210:120377): arch=c000003e syscall=56 success=yes exit=0 a0=6c020011 a1=7f5e6c0cfdf0 a2=8 a3=7f5e740a7373 items=0 ppid=8832 pid=8906 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=FD_PAIR msg=audit(1345713690.210:120377): fd0=0 fd1=0 >type=NETFILTER_CFG msg=audit(1345714149.311:120378): table=nat family=2 entries=7 >type=SYSCALL msg=audit(1345714149.311:120378): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=9c3800 items=0 ppid=16878 pid=16891 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345714149.316:120379): table=nat family=2 entries=6 >type=SYSCALL msg=audit(1345714149.316:120379): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=fce800 items=0 ppid=16878 pid=16892 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345714149.318:120380): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1345714149.318:120380): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=d385e0 items=0 ppid=16878 pid=16893 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345714149.321:120381): table=filter family=2 entries=13 >type=SYSCALL msg=audit(1345714149.321:120381): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1a8a610 items=0 ppid=16878 pid=16894 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345714149.323:120382): table=filter family=2 entries=12 >type=SYSCALL msg=audit(1345714149.323:120382): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=e7d9e0 items=0 ppid=16878 pid=16895 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345714149.325:120383): table=filter family=2 entries=11 >type=SYSCALL msg=audit(1345714149.325:120383): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1f28860 items=0 ppid=16878 pid=16896 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345714149.328:120384): table=filter family=2 entries=10 >type=SYSCALL msg=audit(1345714149.328:120384): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=84ab30 items=0 ppid=16878 pid=16897 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345714149.330:120385): table=filter family=2 entries=9 >type=SYSCALL msg=audit(1345714149.330:120385): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=e2a9b0 items=0 ppid=16878 pid=16898 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345714149.333:120386): table=filter family=2 entries=8 >type=SYSCALL msg=audit(1345714149.333:120386): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=96d090 items=0 ppid=16878 pid=16899 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345714149.335:120387): table=filter family=2 entries=7 >type=SYSCALL msg=audit(1345714149.335:120387): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=10fa7f0 items=0 ppid=16878 pid=16900 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345714149.338:120388): table=mangle family=2 entries=7 >type=SYSCALL msg=audit(1345714149.338:120388): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=104f290 items=0 ppid=16878 pid=16901 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345714149.341:120389): table=filter family=2 entries=6 >type=SYSCALL msg=audit(1345714149.341:120389): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=b927f0 items=0 ppid=16878 pid=16902 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345714149.343:120390): table=filter family=2 entries=5 >type=SYSCALL msg=audit(1345714149.343:120390): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=6d47f0 items=0 ppid=16878 pid=16903 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345714149.346:120391): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1345714149.346:120391): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1ad67f0 items=0 ppid=16878 pid=16904 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345714149.348:120392): table=filter family=2 entries=5 >type=SYSCALL msg=audit(1345714149.348:120392): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=17c27f0 items=0 ppid=16878 pid=16905 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345714149.351:120393): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1345714149.351:120393): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=9b6290 items=0 ppid=16878 pid=16906 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345714149.354:120394): table=filter family=2 entries=6 >type=SYSCALL msg=audit(1345714149.354:120394): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=22bae50 items=0 ppid=16878 pid=16907 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345714149.356:120395): table=filter family=2 entries=7 >type=SYSCALL msg=audit(1345714149.356:120395): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=2127fc0 items=0 ppid=16878 pid=16908 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345714149.358:120396): table=filter family=2 entries=8 >type=SYSCALL msg=audit(1345714149.358:120396): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1756920 items=0 ppid=16878 pid=16909 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345714149.361:120397): table=filter family=2 entries=9 >type=SYSCALL msg=audit(1345714149.361:120397): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=17b6a90 items=0 ppid=16878 pid=16910 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345714149.363:120398): table=filter family=2 entries=10 >type=SYSCALL msg=audit(1345714149.363:120398): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=12b77d0 items=0 ppid=16878 pid=16911 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345714149.366:120399): table=filter family=2 entries=11 >type=SYSCALL msg=audit(1345714149.366:120399): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1e1a940 items=0 ppid=16878 pid=16912 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345714149.368:120400): table=filter family=2 entries=12 >type=SYSCALL msg=audit(1345714149.368:120400): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1741550 items=0 ppid=16878 pid=16913 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345714149.370:120401): table=nat family=2 entries=4 >type=SYSCALL msg=audit(1345714149.370:120401): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=fd0620 items=0 ppid=16878 pid=16914 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345714149.372:120402): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1345714149.372:120402): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1b18800 items=0 ppid=16878 pid=16915 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345714149.374:120403): table=nat family=2 entries=6 >type=SYSCALL msg=audit(1345714149.374:120403): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=acc700 items=0 ppid=16878 pid=16916 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345714149.798:120404): table=filter family=10 entries=0 >type=NETFILTER_CFG msg=audit(1345714149.798:120404): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1345714149.798:120404): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1345714149.798:120404): table=mangle family=2 entries=0 >type=SYSCALL msg=audit(1345714149.798:120404): arch=c000003e syscall=56 success=yes exit=16963 a0=6c020011 a1=7fbb10109450 a2=8 a3=7fbb170a7373 items=0 ppid=1 pid=16889 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=SYSCALL msg=audit(1345714149.798:120405): arch=c000003e syscall=56 success=yes exit=0 a0=6c020011 a1=7fbb10109450 a2=8 a3=7fbb170a7373 items=0 ppid=16889 pid=16963 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=FD_PAIR msg=audit(1345714149.798:120405): fd0=0 fd1=0 >type=SYSTEM_RUNLEVEL msg=audit(1345714151.144:120406): user pid=16964 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:shutdown_t:s0-s0:c0.c1023 msg='old-level=3 new-level=6 exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success' >type=SYSTEM_SHUTDOWN msg=audit(1345714151.144:120407): user pid=16964 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:shutdown_t:s0-s0:c0.c1023 msg='init exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1345714152.793:120408): user pid=7234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=7234 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345714152.793:120409): user pid=7234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=7234 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1345714152.898:120410): user pid=8229 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1345714152.899:120411): user pid=8229 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1345714152.899:120412): user pid=8229 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1345714152.900:120413): user pid=8229 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1345714152.900:120414): user pid=8229 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8229 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345714152.900:120415): user pid=8229 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8229 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345714152.901:120416): user pid=8229 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8229 suid=0 rport=42379 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=DAEMON_END msg=audit(1345714153.461:7431): auditd normal halt, sending auid=0 pid=17166 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1345714300.553:4070): auditd start, ver=2.2 format=raw kernel=2.6.32-279.5.2.el6.x86_64 auid=4294967295 pid=8191 subj=system_u:system_r:auditd_t:s0 res=success >type=CONFIG_CHANGE msg=audit(1345714300.667:119508): audit_backlog_limit=320 old=256 auid=4294967295 ses=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CRYPTO_KEY_USER msg=audit(1345714333.490:119509): user pid=8215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8215 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345714333.490:119510): user pid=8215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8215 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345714333.492:119511): user pid=8214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=8215 suid=74 rport=42560 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345714333.492:119512): user pid=8214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=8215 suid=74 rport=42560 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1345714336.853:119513): user pid=8214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1345714366.997:119514): user pid=8214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1345714367.000:119515): user pid=8214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345714367.000:119516): user pid=8214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8215 suid=74 rport=42560 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1345714367.001:119517): user pid=8214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1345714367.001:119518): user pid=8214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1345714367.001:119519): pid=8214 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2 >type=USER_ROLE_CHANGE msg=audit(1345714367.069:119520): user pid=8214 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1345714367.072:119521): user pid=8214 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1345714367.074:119522): user pid=8214 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1345714367.074:119523): user pid=8214 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345714367.075:119524): user pid=8218 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8218 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345714367.075:119525): user pid=8218 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8218 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRED_REFR msg=audit(1345714367.076:119526): user pid=8218 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=VIRT_MACHINE_ID msg=audit(1345714367.348:119527): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=system_u:system_r:svirt_t:s0:c289,c710 img-ctx=system_u:object_r:svirt_image_t:s0:c289,c710 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714367.472:119528): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714367.480:119529): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/mnt/testkf8.qcow2 rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1345714367.548:119530): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-disk="?" new-disk="/mnt/testkf8.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714367.548:119531): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714367.548:119532): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714367.548:119533): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1345714367.548:119534): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=migrated vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=USER_END msg=audit(1345714367.710:119535): user pid=8214 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1345714367.710:119536): user pid=8214 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1345714367.710:119537): user pid=8214 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1345714367.710:119538): user pid=8214 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345714367.710:119539): user pid=8214 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8214 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345714367.711:119540): user pid=8214 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8214 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345714367.711:119541): user pid=8214 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8214 suid=0 rport=42560 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345714451.050:119542): user pid=8255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8255 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345714451.050:119543): user pid=8255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8255 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345714451.052:119544): user pid=8254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=8255 suid=74 rport=42570 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345714451.052:119545): user pid=8254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=8255 suid=74 rport=42570 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1345714456.566:119546): user pid=8254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1345714486.155:119547): user pid=8254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1345714486.158:119548): user pid=8254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345714486.158:119549): user pid=8254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8255 suid=74 rport=42570 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1345714486.159:119550): user pid=8254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1345714486.159:119551): user pid=8254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1345714486.159:119552): pid=8254 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3 >type=USER_ROLE_CHANGE msg=audit(1345714486.228:119553): user pid=8254 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1345714486.232:119554): user pid=8254 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1345714486.234:119555): user pid=8254 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1345714486.234:119556): user pid=8254 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345714486.235:119557): user pid=8258 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8258 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345714486.235:119558): user pid=8258 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8258 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRED_REFR msg=audit(1345714486.235:119559): user pid=8258 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=VIRT_MACHINE_ID msg=audit(1345714486.466:119560): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=system_u:system_r:svirt_t:s0:c770,c867 img-ctx=system_u:object_r:svirt_image_t:s0:c770,c867 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714486.588:119561): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714486.592:119562): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714486.592:119563): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714486.592:119564): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714486.593:119565): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714486.593:119566): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714486.593:119567): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714486.593:119568): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714486.593:119569): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714486.593:119570): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1345714486.594:119571): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714486.594:119572): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714486.623:119573): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="macvtap0" rdev=? exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714486.623:119574): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1345714486.689:119575): avc: denied { read write } for pid=8278 comm="qemu-kvm" path="/dev/tap7" dev=devtmpfs ino=32769 scontext=system_u:system_r:svirt_t:s0:c770,c867 tcontext=system_u:object_r:device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1345714486.689:119575): arch=c000003e syscall=59 success=yes exit=0 a0=7fd61c01aee0 a1=7fd61c01b790 a2=7fd61c0f21e0 a3=7fd62978c700 items=0 ppid=1 pid=8278 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=system_u:system_r:svirt_t:s0:c770,c867 key=(null) >type=VIRT_RESOURCE msg=audit(1345714486.984:119576): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-disk="?" new-disk="/mnt/testkf8.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714486.984:119577): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714486.984:119578): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714486.984:119579): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1345714486.984:119580): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=migrated vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=8278 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1345714554.124:119581): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=failed vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1345714554.295:119582): user pid=8254 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1345714554.295:119583): user pid=8254 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1345714554.296:119584): user pid=8254 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1345714554.296:119585): user pid=8254 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345714554.296:119586): user pid=8254 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8254 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345714554.296:119587): user pid=8254 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8254 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345714554.296:119588): user pid=8254 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8254 suid=0 rport=42570 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345714622.676:119589): user pid=8361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8361 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345714622.676:119590): user pid=8361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8361 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345714622.677:119591): user pid=8360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=8361 suid=74 rport=42585 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345714622.677:119592): user pid=8360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=8361 suid=74 rport=42585 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1345714626.152:119593): user pid=8360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1345714628.612:119594): user pid=8360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1345714628.614:119595): user pid=8360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345714628.615:119596): user pid=8360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8361 suid=74 rport=42585 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1345714628.615:119597): user pid=8360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1345714628.616:119598): user pid=8360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1345714628.616:119599): pid=8360 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4 >type=USER_ROLE_CHANGE msg=audit(1345714628.683:119600): user pid=8360 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1345714628.686:119601): user pid=8360 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1345714628.688:119602): user pid=8360 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1345714628.688:119603): user pid=8360 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345714628.689:119604): user pid=8364 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8364 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345714628.689:119605): user pid=8364 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8364 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRED_REFR msg=audit(1345714628.690:119606): user pid=8364 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=VIRT_MACHINE_ID msg=audit(1345714628.940:119607): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=system_u:system_r:svirt_t:s0:c384,c507 img-ctx=system_u:object_r:svirt_image_t:s0:c384,c507 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714629.055:119608): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714629.059:119609): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714629.059:119610): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714629.059:119611): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714629.059:119612): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714629.059:119613): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714629.059:119614): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714629.059:119615): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714629.060:119616): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714629.060:119617): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1345714629.060:119618): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714629.060:119619): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714629.082:119620): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="macvtap0" rdev=? exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714629.082:119621): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1345714629.131:119622): avc: denied { read write } for pid=8384 comm="qemu-kvm" path="/dev/tap8" dev=devtmpfs ino=33301 scontext=system_u:system_r:svirt_t:s0:c384,c507 tcontext=system_u:object_r:device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1345714629.131:119622): arch=c000003e syscall=59 success=yes exit=0 a0=7fd61c0f1ed0 a1=7fd61c138800 a2=7fd61c13aa50 a3=7fd62978c700 items=0 ppid=1 pid=8384 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=system_u:system_r:svirt_t:s0:c384,c507 key=(null) >type=VIRT_RESOURCE msg=audit(1345714629.389:119623): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-disk="?" new-disk="/mnt/testkf8.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714629.389:119624): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714629.389:119625): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714629.389:119626): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1345714629.389:119627): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=migrated vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=8384 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1345714687.254:119628): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=failed vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1345714687.449:119629): user pid=8360 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1345714687.449:119630): user pid=8360 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1345714687.449:119631): user pid=8360 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1345714687.449:119632): user pid=8360 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345714687.449:119633): user pid=8360 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8360 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345714687.450:119634): user pid=8360 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8360 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345714687.450:119635): user pid=8360 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8360 suid=0 rport=42585 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1345714719.063:119636): table=filter family=2 entries=13 >type=SYSCALL msg=audit(1345714719.063:119636): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=786ff0 items=0 ppid=8156 pid=8433 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1345714726.737:119637): user pid=8437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8437 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345714726.737:119638): user pid=8437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8437 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345714726.737:119639): user pid=8436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=8437 suid=74 rport=42597 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345714726.737:119640): user pid=8436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=8437 suid=74 rport=42597 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1345714730.470:119641): user pid=8436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1345714733.763:119642): user pid=8436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1345714733.766:119643): user pid=8436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345714733.767:119644): user pid=8436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8437 suid=74 rport=42597 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1345714733.767:119645): user pid=8436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1345714733.768:119646): user pid=8436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1345714733.768:119647): pid=8436 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=5 >type=USER_ROLE_CHANGE msg=audit(1345714733.834:119648): user pid=8436 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1345714733.837:119649): user pid=8436 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1345714733.837:119650): user pid=8436 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1345714733.837:119651): user pid=8436 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345714733.838:119652): user pid=8440 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8440 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345714733.838:119653): user pid=8440 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8440 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRED_REFR msg=audit(1345714733.839:119654): user pid=8440 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=VIRT_MACHINE_ID msg=audit(1345714734.073:119655): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=system_u:system_r:svirt_t:s0:c53,c690 img-ctx=system_u:object_r:svirt_image_t:s0:c53,c690 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714734.192:119656): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714734.195:119657): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714734.195:119658): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714734.195:119659): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714734.195:119660): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714734.195:119661): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714734.195:119662): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714734.195:119663): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714734.196:119664): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714734.196:119665): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1345714734.196:119666): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714734.196:119667): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714734.218:119668): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="macvtap0" rdev=? exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714734.218:119669): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1345714734.279:119670): avc: denied { read write } for pid=8460 comm="qemu-kvm" path="/dev/tap9" dev=devtmpfs ino=33687 scontext=system_u:system_r:svirt_t:s0:c53,c690 tcontext=system_u:object_r:device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1345714734.279:119670): arch=c000003e syscall=59 success=yes exit=0 a0=7fd60c0088c0 a1=7fd60c0093a0 a2=7fd60c0081a0 a3=7fd627989700 items=0 ppid=1 pid=8460 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=system_u:system_r:svirt_t:s0:c53,c690 key=(null) >type=VIRT_RESOURCE msg=audit(1345714734.536:119671): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-disk="?" new-disk="/mnt/testkf8.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714734.536:119672): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714734.536:119673): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714734.536:119674): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1345714734.536:119675): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=migrated vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=8460 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1345714791.790:119676): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=failed vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1345714791.974:119677): user pid=8436 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1345714791.974:119678): user pid=8436 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1345714791.974:119679): user pid=8436 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1345714791.975:119680): user pid=8436 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345714791.975:119681): user pid=8436 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8436 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345714791.975:119682): user pid=8436 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8436 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345714791.975:119683): user pid=8436 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8436 suid=0 rport=42597 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345714800.396:119684): user pid=8519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8519 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345714800.396:119685): user pid=8519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8519 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345714800.396:119686): user pid=8518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=8519 suid=74 rport=42603 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345714800.397:119687): user pid=8518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=8519 suid=74 rport=42603 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_ACCT msg=audit(1345714801.206:119688): user pid=8520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345714801.206:119689): user pid=8520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345714801.211:119690): pid=8520 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=6 >type=USER_START msg=audit(1345714801.219:119691): user pid=8520 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345714801.254:119692): user pid=8520 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345714801.254:119693): user pid=8520 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_AUTH msg=audit(1345714805.746:119694): user pid=8518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1345714808.097:119695): user pid=8518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1345714808.099:119696): user pid=8518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345714808.100:119697): user pid=8518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8519 suid=74 rport=42603 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1345714808.100:119698): user pid=8518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1345714808.101:119699): user pid=8518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1345714808.101:119700): pid=8518 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=7 >type=USER_ROLE_CHANGE msg=audit(1345714808.164:119701): user pid=8518 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1345714808.167:119702): user pid=8518 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1345714808.169:119703): user pid=8518 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1345714808.169:119704): user pid=8518 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345714808.170:119705): user pid=8525 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8525 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345714808.170:119706): user pid=8525 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8525 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRED_REFR msg=audit(1345714808.171:119707): user pid=8525 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=VIRT_MACHINE_ID msg=audit(1345714808.425:119708): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=system_u:system_r:svirt_t:s0:c228,c874 img-ctx=system_u:object_r:svirt_image_t:s0:c228,c874 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714808.543:119709): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714808.546:119710): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714808.546:119711): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714808.546:119712): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714808.546:119713): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714808.546:119714): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714808.546:119715): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714808.546:119716): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714808.547:119717): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714808.547:119718): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1345714808.547:119719): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714808.547:119720): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714808.575:119721): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="macvtap0" rdev=? exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714808.575:119722): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1345714808.641:119723): avc: denied { read write } for pid=8545 comm="qemu-kvm" path="/dev/tap10" dev=devtmpfs ino=34121 scontext=system_u:system_r:svirt_t:s0:c228,c874 tcontext=system_u:object_r:device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1345714808.641:119723): arch=c000003e syscall=59 success=yes exit=0 a0=7fd61c0cc520 a1=7fd61c0cd100 a2=7fd61c0b4170 a3=7fd62978c700 items=0 ppid=1 pid=8545 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=system_u:system_r:svirt_t:s0:c228,c874 key=(null) >type=VIRT_RESOURCE msg=audit(1345714808.920:119724): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-disk="?" new-disk="/mnt/testkf8.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714808.920:119725): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714808.920:119726): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345714808.921:119727): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1345714808.921:119728): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=migrated vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=8545 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1345714866.868:119729): user pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=failed vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1345714867.065:119730): user pid=8518 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1345714867.065:119731): user pid=8518 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1345714867.066:119732): user pid=8518 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1345714867.066:119733): user pid=8518 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345714867.066:119734): user pid=8518 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8518 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345714867.066:119735): user pid=8518 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8518 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345714867.066:119736): user pid=8518 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8518 suid=0 rport=42603 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345714888.456:119737): user pid=8598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8598 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345714888.456:119738): user pid=8598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8598 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345714888.457:119739): user pid=8597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=8598 suid=74 rport=42610 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345714888.458:119740): user pid=8597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=8598 suid=74 rport=42610 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1345714892.166:119741): user pid=8597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=CRYPTO_KEY_USER msg=audit(1345714894.733:119742): user pid=8597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8598 suid=74 rport=42610 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_ERR msg=audit(1345714894.733:119743): user pid=8597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident acct="?" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=failed' >type=CRYPTO_KEY_USER msg=audit(1345714894.733:119744): user pid=8597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8597 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345714894.733:119745): user pid=8597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8597 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_LOGIN msg=audit(1345714894.733:119746): user pid=8597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=NETFILTER_CFG msg=audit(1345714922.555:119747): table=nat family=2 entries=7 >type=SYSCALL msg=audit(1345714922.555:119747): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=f79800 items=0 ppid=8628 pid=8641 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345714922.559:119748): table=nat family=2 entries=6 >type=SYSCALL msg=audit(1345714922.559:119748): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=2667800 items=0 ppid=8628 pid=8642 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345714922.561:119749): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1345714922.561:119749): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=19d55e0 items=0 ppid=8628 pid=8643 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345714922.580:119750): table=mangle family=2 entries=7 >type=SYSCALL msg=audit(1345714922.580:119750): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=147f290 items=0 ppid=8628 pid=8651 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345714922.588:119751): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1345714922.588:119751): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=11aa7f0 items=0 ppid=8628 pid=8654 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345714922.591:119752): table=filter family=2 entries=5 >type=SYSCALL msg=audit(1345714922.591:119752): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=144d7f0 items=0 ppid=8628 pid=8655 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345714922.593:119753): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1345714922.593:119753): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1cd5290 items=0 ppid=8628 pid=8656 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345714922.596:119754): table=filter family=2 entries=6 >type=SYSCALL msg=audit(1345714922.596:119754): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1a51e50 items=0 ppid=8628 pid=8657 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345714922.599:119755): table=filter family=2 entries=7 >type=SYSCALL msg=audit(1345714922.599:119755): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1be8fc0 items=0 ppid=8628 pid=8658 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345714922.601:119756): table=filter family=2 entries=8 >type=SYSCALL msg=audit(1345714922.601:119756): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=192d920 items=0 ppid=8628 pid=8659 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345714922.604:119757): table=filter family=2 entries=9 >type=SYSCALL msg=audit(1345714922.604:119757): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=76ea90 items=0 ppid=8628 pid=8660 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345714922.606:119758): table=filter family=2 entries=10 >type=SYSCALL msg=audit(1345714922.606:119758): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1b237d0 items=0 ppid=8628 pid=8661 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345714922.608:119759): table=filter family=2 entries=11 >type=SYSCALL msg=audit(1345714922.608:119759): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=dd7940 items=0 ppid=8628 pid=8662 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345714922.611:119760): table=filter family=2 entries=12 >type=SYSCALL msg=audit(1345714922.611:119760): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=15bc550 items=0 ppid=8628 pid=8663 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345714922.613:119761): table=nat family=2 entries=4 >type=SYSCALL msg=audit(1345714922.613:119761): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1940620 items=0 ppid=8628 pid=8664 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345714922.615:119762): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1345714922.615:119762): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=2560800 items=0 ppid=8628 pid=8665 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345714922.617:119763): table=nat family=2 entries=6 >type=SYSCALL msg=audit(1345714922.617:119763): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1117700 items=0 ppid=8628 pid=8666 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345714923.093:119764): table=filter family=10 entries=0 >type=NETFILTER_CFG msg=audit(1345714923.093:119764): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1345714923.093:119764): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1345714923.093:119764): table=mangle family=2 entries=0 >type=SYSCALL msg=audit(1345714923.093:119764): arch=c000003e syscall=56 success=yes exit=8713 a0=6c020011 a1=7f4c7c0cce20 a2=8 a3=7f4c820a7373 items=0 ppid=1 pid=8639 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=SYSCALL msg=audit(1345714923.093:119765): arch=c000003e syscall=56 success=yes exit=0 a0=6c020011 a1=7f4c7c0cce20 a2=8 a3=7f4c820a7373 items=0 ppid=8639 pid=8713 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=FD_PAIR msg=audit(1345714923.093:119765): fd0=0 fd1=0 >type=NETFILTER_CFG msg=audit(1345714989.502:119766): table=filter family=2 entries=13 >type=SYSCALL msg=audit(1345714989.502:119766): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1071ff0 items=0 ppid=8156 pid=8720 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1345714999.694:119767): user pid=8722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8722 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345714999.695:119768): user pid=8722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8722 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345714999.696:119769): user pid=8721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=8722 suid=74 rport=42621 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345714999.696:119770): user pid=8721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=8722 suid=74 rport=42621 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1345715003.416:119771): user pid=8721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1345715007.815:119772): user pid=8721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1345715007.818:119773): user pid=8721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345715007.819:119774): user pid=8721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8722 suid=74 rport=42621 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1345715007.819:119775): user pid=8721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1345715007.820:119776): user pid=8721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1345715007.820:119777): pid=8721 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=8 >type=USER_ROLE_CHANGE msg=audit(1345715007.891:119778): user pid=8721 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1345715007.894:119779): user pid=8721 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1345715007.894:119780): user pid=8721 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1345715007.894:119781): user pid=8721 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345715007.895:119782): user pid=8725 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8725 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345715007.895:119783): user pid=8725 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8725 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRED_REFR msg=audit(1345715007.896:119784): user pid=8725 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345715034.573:119785): user pid=8738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8738 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345715034.573:119786): user pid=8738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8738 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345715034.573:119787): user pid=8737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=8738 suid=74 rport=42628 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345715034.574:119788): user pid=8737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=8738 suid=74 rport=42628 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1345715039.948:119789): user pid=8737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1345715042.090:119790): user pid=8737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1345715042.092:119791): user pid=8737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345715042.093:119792): user pid=8737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8738 suid=74 rport=42628 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1345715042.093:119793): user pid=8737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1345715042.093:119794): user pid=8737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1345715042.094:119795): pid=8737 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=9 >type=USER_ROLE_CHANGE msg=audit(1345715042.152:119796): user pid=8737 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1345715042.155:119797): user pid=8737 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1345715042.157:119798): user pid=8737 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1345715042.157:119799): user pid=8737 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345715042.158:119800): user pid=8747 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8747 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345715042.158:119801): user pid=8747 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8747 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRED_REFR msg=audit(1345715042.159:119802): user pid=8747 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=VIRT_MACHINE_ID msg=audit(1345715042.397:119803): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=system_u:system_r:svirt_t:s0:c279,c281 img-ctx=system_u:object_r:svirt_image_t:s0:c279,c281 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345715042.515:119804): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345715042.518:119805): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345715042.518:119806): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345715042.518:119807): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345715042.518:119808): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345715042.518:119809): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345715042.518:119810): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345715042.519:119811): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345715042.519:119812): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345715042.519:119813): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1345715042.519:119814): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345715042.519:119815): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345715042.541:119816): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="macvtap0" rdev=? exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345715042.541:119817): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1345715042.598:119818): avc: denied { read write } for pid=8767 comm="qemu-kvm" path="/dev/tap12" dev=devtmpfs ino=35010 scontext=system_u:system_r:svirt_t:s0:c279,c281 tcontext=system_u:object_r:device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1345715042.598:119818): arch=c000003e syscall=59 success=yes exit=0 a0=7f4c7000a010 a1=7f4c7000aa50 a2=7f4c7000f330 a3=7f4c8735b700 items=0 ppid=1 pid=8767 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=1 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=system_u:system_r:svirt_t:s0:c279,c281 key=(null) >type=VIRT_RESOURCE msg=audit(1345715042.864:119819): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-disk="?" new-disk="/mnt/testkf8.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345715042.864:119820): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345715042.864:119821): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345715042.864:119822): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1345715042.864:119823): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=migrated vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=8767 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1345715052.710:119824): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=failed vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1345715052.910:119825): user pid=8737 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1345715052.910:119826): user pid=8737 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1345715052.910:119827): user pid=8737 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1345715052.910:119828): user pid=8737 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345715052.910:119829): user pid=8737 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8737 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345715052.911:119830): user pid=8737 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8737 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345715052.911:119831): user pid=8737 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8737 suid=0 rport=42628 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=MAC_CONFIG_CHANGE msg=audit(1345715132.287:119832): bool=virt_use_nfs val=0 old_val=1 auid=0 ses=1 >type=SYSCALL msg=audit(1345715132.287:119832): arch=c000003e syscall=1 success=yes exit=2 a0=4 a1=7fffe89aa010 a2=2 a3=fffffff8 items=0 ppid=8156 pid=8818 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=1 comm="setsebool" exe="/usr/sbin/setsebool" subj=unconfined_u:unconfined_r:setsebool_t:s0-s0:c0.c1023 key=(null) >type=MAC_STATUS msg=audit(1345715141.116:119833): enforcing=0 old_enforcing=1 auid=0 ses=1 >type=SYSCALL msg=audit(1345715141.116:119833): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff54c7de60 a2=1 a3=7fff54c7cbe0 items=0 ppid=8156 pid=8820 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=1 comm="setenforce" exe="/usr/sbin/setenforce" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1345715149.035:119834): user pid=8822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8822 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345715149.035:119835): user pid=8822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8822 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345715149.036:119836): user pid=8821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=8822 suid=74 rport=42635 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345715149.037:119837): user pid=8821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=8822 suid=74 rport=42635 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1345715152.762:119838): user pid=8821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1345715155.363:119839): user pid=8821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1345715155.366:119840): user pid=8821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345715155.366:119841): user pid=8821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8822 suid=74 rport=42635 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1345715155.367:119842): user pid=8821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1345715155.367:119843): user pid=8821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1345715155.367:119844): pid=8821 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=10 >type=USER_ROLE_CHANGE msg=audit(1345715155.437:119845): user pid=8821 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1345715155.439:119846): user pid=8821 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1345715155.441:119847): user pid=8821 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1345715155.441:119848): user pid=8821 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345715155.442:119849): user pid=8831 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8831 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345715155.442:119850): user pid=8831 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8831 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRED_REFR msg=audit(1345715155.443:119851): user pid=8831 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=VIRT_MACHINE_ID msg=audit(1345715155.679:119852): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=system_u:system_r:svirt_t:s0:c131,c263 img-ctx=system_u:object_r:svirt_image_t:s0:c131,c263 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345715155.800:119853): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345715155.803:119854): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345715155.803:119855): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345715155.803:119856): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345715155.803:119857): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345715155.803:119858): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345715155.803:119859): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345715155.804:119860): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345715155.804:119861): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345715155.804:119862): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1345715155.804:119863): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345715155.804:119864): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345715155.832:119865): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="macvtap0" rdev=? exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345715155.832:119866): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1345715155.896:119867): avc: denied { read write } for pid=8851 comm="qemu-kvm" path="/dev/tap13" dev=devtmpfs ino=35690 scontext=system_u:system_r:svirt_t:s0:c131,c263 tcontext=system_u:object_r:device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1345715155.896:119867): arch=c000003e syscall=59 success=yes exit=0 a0=7f4c6c00bd90 a1=7f4c6c00c810 a2=7f4c6c00b3e0 a3=7f4c87d5c700 items=0 ppid=1 pid=8851 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=1 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=system_u:system_r:svirt_t:s0:c131,c263 key=(null) >type=AVC msg=audit(1345715155.988:119868): avc: denied { open } for pid=8851 comm="qemu-kvm" name="testkf8.qcow2" dev=0:1b ino=7368989 scontext=system_u:system_r:svirt_t:s0:c131,c263 tcontext=system_u:object_r:nfs_t:s0 tclass=file >type=SYSCALL msg=audit(1345715155.988:119868): arch=c000003e syscall=2 success=yes exit=9 a0=7f64267ebc10 a1=800 a2=0 a3=0 items=0 ppid=1 pid=8851 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=1 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=system_u:system_r:svirt_t:s0:c131,c263 key=(null) >type=VIRT_RESOURCE msg=audit(1345715156.152:119869): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-disk="?" new-disk="/mnt/testkf8.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345715156.152:119870): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345715156.152:119871): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345715156.152:119872): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1345715156.152:119873): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=migrated vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=8851 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1345715166.528:119874): user pid=8821 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1345715166.528:119875): user pid=8821 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1345715166.528:119876): user pid=8821 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1345715166.528:119877): user pid=8821 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345715166.528:119878): user pid=8821 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8821 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345715166.528:119879): user pid=8821 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8821 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345715166.529:119880): user pid=8821 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8821 suid=0 rport=42635 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345715179.080:119881): user pid=8882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8882 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345715179.080:119882): user pid=8882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8882 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345715179.080:119883): user pid=8881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=8882 suid=74 rport=42640 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345715179.081:119884): user pid=8881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=8882 suid=74 rport=42640 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1345715182.503:119885): user pid=8881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1345715184.271:119886): user pid=8881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1345715184.274:119887): user pid=8881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345715184.274:119888): user pid=8881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8882 suid=74 rport=42640 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1345715184.275:119889): user pid=8881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1345715184.275:119890): user pid=8881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1345715184.275:119891): pid=8881 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=11 >type=USER_ROLE_CHANGE msg=audit(1345715184.337:119892): user pid=8881 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1345715184.340:119893): user pid=8881 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1345715184.340:119894): user pid=8881 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1345715184.341:119895): user pid=8881 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345715184.341:119896): user pid=8885 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8885 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345715184.341:119897): user pid=8885 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8885 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRED_REFR msg=audit(1345715184.342:119898): user pid=8885 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1345715208.335:119899): user pid=8881 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1345715208.335:119900): user pid=8881 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1345715208.336:119901): user pid=8881 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1345715208.336:119902): user pid=8881 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345715208.336:119903): user pid=8881 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8881 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345715208.336:119904): user pid=8881 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8881 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345715208.336:119905): user pid=8881 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8881 suid=0 rport=42640 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=VIRT_CONTROL msg=audit(1345715208.613:119906): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1345715401.293:119907): user pid=8937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345715401.293:119908): user pid=8937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345715401.299:119909): pid=8937 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=12 >type=USER_START msg=audit(1345715401.306:119910): user pid=8937 uid=0 auid=0 ses=12 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345715401.384:119911): user pid=8937 uid=0 auid=0 ses=12 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345715401.384:119912): user pid=8937 uid=0 auid=0 ses=12 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRYPTO_KEY_USER msg=audit(1345715407.606:119913): user pid=8941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8941 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345715407.606:119914): user pid=8941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8941 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345715407.608:119915): user pid=8940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=8941 suid=74 rport=42659 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345715407.608:119916): user pid=8940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=8941 suid=74 rport=42659 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1345715412.204:119917): user pid=8940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1345715414.302:119918): user pid=8940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1345715414.305:119919): user pid=8940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345715414.305:119920): user pid=8940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8941 suid=74 rport=42659 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1345715414.306:119921): user pid=8940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1345715414.307:119922): user pid=8940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1345715414.307:119923): pid=8940 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=13 >type=USER_ROLE_CHANGE msg=audit(1345715414.372:119924): user pid=8940 uid=0 auid=0 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1345715414.375:119925): user pid=8940 uid=0 auid=0 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1345715414.377:119926): user pid=8940 uid=0 auid=0 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1345715414.377:119927): user pid=8940 uid=0 auid=0 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345715414.378:119928): user pid=8944 uid=0 auid=0 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8944 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345715414.378:119929): user pid=8944 uid=0 auid=0 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8944 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRED_REFR msg=audit(1345715414.379:119930): user pid=8944 uid=0 auid=0 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=VIRT_MACHINE_ID msg=audit(1345715414.605:119931): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=system_u:system_r:svirt_t:s0:c719,c914 img-ctx=system_u:object_r:svirt_image_t:s0:c719,c914 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345715414.730:119932): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345715414.733:119933): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345715414.733:119934): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345715414.733:119935): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345715414.734:119936): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345715414.734:119937): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345715414.734:119938): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345715414.734:119939): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345715414.734:119940): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345715414.734:119941): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1345715414.735:119942): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345715414.735:119943): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345715414.762:119944): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="macvtap0" rdev=? exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345715414.763:119945): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1345715414.815:119946): avc: denied { read write } for pid=8964 comm="qemu-kvm" path="/dev/tap14" dev=devtmpfs ino=36431 scontext=system_u:system_r:svirt_t:s0:c719,c914 tcontext=system_u:object_r:device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1345715414.815:119946): arch=c000003e syscall=59 success=yes exit=0 a0=7f4c6c00baf0 a1=7f4c6c00c5d0 a2=7f4c6c00b3d0 a3=7f4c87d5c700 items=0 ppid=1 pid=8964 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=1 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=system_u:system_r:svirt_t:s0:c719,c914 key=(null) >type=AVC msg=audit(1345715414.909:119947): avc: denied { open } for pid=8964 comm="qemu-kvm" name="testkf8.qcow2" dev=0:1b ino=7368989 scontext=system_u:system_r:svirt_t:s0:c719,c914 tcontext=system_u:object_r:nfs_t:s0 tclass=file >type=SYSCALL msg=audit(1345715414.909:119947): arch=c000003e syscall=2 success=yes exit=9 a0=7ff20e126c10 a1=800 a2=0 a3=0 items=0 ppid=1 pid=8964 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=1 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=system_u:system_r:svirt_t:s0:c719,c914 key=(null) >type=VIRT_RESOURCE msg=audit(1345715415.086:119948): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-disk="?" new-disk="/mnt/testkf8.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345715415.086:119949): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345715415.086:119950): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345715415.086:119951): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1345715415.086:119952): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=migrated vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=8964 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1345715485.690:119953): user pid=8940 uid=0 auid=0 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1345715485.690:119954): user pid=8940 uid=0 auid=0 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1345715485.690:119955): user pid=8940 uid=0 auid=0 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1345715485.691:119956): user pid=8940 uid=0 auid=0 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345715485.691:119957): user pid=8940 uid=0 auid=0 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8940 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345715485.691:119958): user pid=8940 uid=0 auid=0 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8940 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345715485.691:119959): user pid=8940 uid=0 auid=0 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8940 suid=0 rport=42659 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345715524.297:119960): user pid=9009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=9009 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345715524.297:119961): user pid=9009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=9009 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345715524.298:119962): user pid=9008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=9009 suid=74 rport=42668 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345715524.299:119963): user pid=9008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=9009 suid=74 rport=42668 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1345715528.074:119964): user pid=9008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1345715530.043:119965): user pid=9008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1345715530.046:119966): user pid=9008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345715530.047:119967): user pid=9008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9009 suid=74 rport=42668 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1345715530.047:119968): user pid=9008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1345715530.048:119969): user pid=9008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1345715530.048:119970): pid=9008 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=14 >type=USER_ROLE_CHANGE msg=audit(1345715530.114:119971): user pid=9008 uid=0 auid=0 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1345715530.117:119972): user pid=9008 uid=0 auid=0 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1345715530.119:119973): user pid=9008 uid=0 auid=0 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1345715530.119:119974): user pid=9008 uid=0 auid=0 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345715530.119:119975): user pid=9012 uid=0 auid=0 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=9012 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345715530.120:119976): user pid=9012 uid=0 auid=0 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=9012 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRED_REFR msg=audit(1345715530.120:119977): user pid=9012 uid=0 auid=0 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1345715902.888:119978): user pid=9008 uid=0 auid=0 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1345715902.888:119979): user pid=9008 uid=0 auid=0 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1345715902.888:119980): user pid=9008 uid=0 auid=0 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1345715902.889:119981): user pid=9008 uid=0 auid=0 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345715902.889:119982): user pid=9008 uid=0 auid=0 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=9008 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345715902.889:119983): user pid=9008 uid=0 auid=0 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=9008 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345715902.889:119984): user pid=9008 uid=0 auid=0 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9008 suid=0 rport=42668 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=VIRT_CONTROL msg=audit(1345715903.115:119985): user pid=8628 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1345716001.416:119986): user pid=9091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345716001.416:119987): user pid=9091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345716001.417:119988): pid=9091 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=15 >type=USER_START msg=audit(1345716001.426:119989): user pid=9091 uid=0 auid=0 ses=15 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345716001.472:119990): user pid=9091 uid=0 auid=0 ses=15 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345716001.472:119991): user pid=9091 uid=0 auid=0 ses=15 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345716061.481:119992): user pid=9101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345716061.481:119993): user pid=9101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345716061.482:119994): pid=9101 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=16 >type=USER_START msg=audit(1345716061.489:119995): user pid=9101 uid=0 auid=0 ses=16 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345716061.579:119996): user pid=9101 uid=0 auid=0 ses=16 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345716061.579:119997): user pid=9101 uid=0 auid=0 ses=16 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345716601.586:119998): user pid=9171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345716601.586:119999): user pid=9171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345716601.587:120000): pid=9171 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=17 >type=USER_START msg=audit(1345716601.595:120001): user pid=9171 uid=0 auid=0 ses=17 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345716601.659:120002): user pid=9171 uid=0 auid=0 ses=17 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345716601.659:120003): user pid=9171 uid=0 auid=0 ses=17 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345717201.689:120004): user pid=2604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345717201.690:120005): user pid=2604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345717201.691:120006): pid=2604 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=18 >type=USER_START msg=audit(1345717201.701:120007): user pid=2604 uid=0 auid=0 ses=18 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345717201.742:120008): user pid=2604 uid=0 auid=0 ses=18 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345717201.742:120009): user pid=2604 uid=0 auid=0 ses=18 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345717801.750:120010): user pid=2667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345717801.750:120011): user pid=2667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345717801.750:120012): pid=2667 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=19 >type=USER_START msg=audit(1345717801.760:120013): user pid=2667 uid=0 auid=0 ses=19 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345717801.819:120014): user pid=2667 uid=0 auid=0 ses=19 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345717801.819:120015): user pid=2667 uid=0 auid=0 ses=19 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345718401.826:120016): user pid=2732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345718401.826:120017): user pid=2732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345718401.826:120018): pid=2732 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=20 >type=USER_START msg=audit(1345718401.834:120019): user pid=2732 uid=0 auid=0 ses=20 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345718401.892:120020): user pid=2732 uid=0 auid=0 ses=20 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345718401.892:120021): user pid=2732 uid=0 auid=0 ses=20 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345719001.899:120022): user pid=2795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345719001.899:120023): user pid=2795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345719001.900:120024): pid=2795 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=21 >type=USER_START msg=audit(1345719001.907:120025): user pid=2795 uid=0 auid=0 ses=21 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345719001.938:120026): user pid=2795 uid=0 auid=0 ses=21 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345719001.938:120027): user pid=2795 uid=0 auid=0 ses=21 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345719601.945:120028): user pid=2867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345719601.946:120029): user pid=2867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345719601.946:120030): pid=2867 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=22 >type=USER_START msg=audit(1345719601.954:120031): user pid=2867 uid=0 auid=0 ses=22 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345719602.038:120032): user pid=2867 uid=0 auid=0 ses=22 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345719602.038:120033): user pid=2867 uid=0 auid=0 ses=22 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345719661.043:120034): user pid=2876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345719661.043:120035): user pid=2876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345719661.043:120036): pid=2876 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=23 >type=USER_START msg=audit(1345719661.051:120037): user pid=2876 uid=0 auid=0 ses=23 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345719661.064:120038): user pid=2876 uid=0 auid=0 ses=23 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345719661.065:120039): user pid=2876 uid=0 auid=0 ses=23 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345720201.077:120040): user pid=2943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345720201.077:120041): user pid=2943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345720201.077:120042): pid=2943 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=24 >type=USER_START msg=audit(1345720201.085:120043): user pid=2943 uid=0 auid=0 ses=24 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345720201.105:120044): user pid=2943 uid=0 auid=0 ses=24 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345720201.106:120045): user pid=2943 uid=0 auid=0 ses=24 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345720801.112:120046): user pid=3006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345720801.113:120047): user pid=3006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345720801.113:120048): pid=3006 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=25 >type=USER_START msg=audit(1345720801.123:120049): user pid=3006 uid=0 auid=0 ses=25 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345720801.184:120050): user pid=3006 uid=0 auid=0 ses=25 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345720801.184:120051): user pid=3006 uid=0 auid=0 ses=25 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345721401.193:120052): user pid=3090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345721401.193:120053): user pid=3090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345721401.194:120054): pid=3090 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=26 >type=USER_START msg=audit(1345721401.203:120055): user pid=3090 uid=0 auid=0 ses=26 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345721401.231:120056): user pid=3090 uid=0 auid=0 ses=26 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345721401.231:120057): user pid=3090 uid=0 auid=0 ses=26 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345722001.238:120058): user pid=3153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345722001.238:120059): user pid=3153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345722001.239:120060): pid=3153 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=27 >type=USER_START msg=audit(1345722001.244:120061): user pid=3153 uid=0 auid=0 ses=27 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345722001.304:120062): user pid=3153 uid=0 auid=0 ses=27 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345722001.304:120063): user pid=3153 uid=0 auid=0 ses=27 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345722601.311:120064): user pid=3216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345722601.311:120065): user pid=3216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345722601.312:120066): pid=3216 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=28 >type=USER_START msg=audit(1345722601.318:120067): user pid=3216 uid=0 auid=0 ses=28 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345722601.340:120068): user pid=3216 uid=0 auid=0 ses=28 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345722601.340:120069): user pid=3216 uid=0 auid=0 ses=28 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345723201.347:120070): user pid=3279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345723201.347:120071): user pid=3279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345723201.347:120072): pid=3279 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=29 >type=USER_START msg=audit(1345723201.356:120073): user pid=3279 uid=0 auid=0 ses=29 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345723201.426:120074): user pid=3279 uid=0 auid=0 ses=29 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345723201.426:120075): user pid=3279 uid=0 auid=0 ses=29 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345723261.431:120076): user pid=3288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345723261.431:120077): user pid=3288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345723261.431:120078): pid=3288 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=30 >type=USER_START msg=audit(1345723261.436:120079): user pid=3288 uid=0 auid=0 ses=30 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345723261.448:120080): user pid=3288 uid=0 auid=0 ses=30 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345723261.448:120081): user pid=3288 uid=0 auid=0 ses=30 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345723801.455:120082): user pid=3354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345723801.455:120083): user pid=3354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345723801.455:120084): pid=3354 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=31 >type=USER_START msg=audit(1345723801.463:120085): user pid=3354 uid=0 auid=0 ses=31 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345723801.482:120086): user pid=3354 uid=0 auid=0 ses=31 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345723801.482:120087): user pid=3354 uid=0 auid=0 ses=31 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345724401.489:120088): user pid=3417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345724401.489:120089): user pid=3417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345724401.489:120090): pid=3417 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=32 >type=USER_START msg=audit(1345724401.495:120091): user pid=3417 uid=0 auid=0 ses=32 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345724401.571:120092): user pid=3417 uid=0 auid=0 ses=32 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345724401.571:120093): user pid=3417 uid=0 auid=0 ses=32 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345725001.578:120094): user pid=3480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345725001.578:120095): user pid=3480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345725001.578:120096): pid=3480 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=33 >type=USER_START msg=audit(1345725001.584:120097): user pid=3480 uid=0 auid=0 ses=33 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345725001.652:120098): user pid=3480 uid=0 auid=0 ses=33 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345725001.652:120099): user pid=3480 uid=0 auid=0 ses=33 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345725601.659:120100): user pid=3543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345725601.659:120101): user pid=3543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345725601.659:120102): pid=3543 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=34 >type=USER_START msg=audit(1345725601.665:120103): user pid=3543 uid=0 auid=0 ses=34 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345725601.687:120104): user pid=3543 uid=0 auid=0 ses=34 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345725601.687:120105): user pid=3543 uid=0 auid=0 ses=34 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345726201.694:120106): user pid=3607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345726201.694:120107): user pid=3607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345726201.695:120108): pid=3607 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=35 >type=USER_START msg=audit(1345726201.701:120109): user pid=3607 uid=0 auid=0 ses=35 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345726201.764:120110): user pid=3607 uid=0 auid=0 ses=35 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345726201.764:120111): user pid=3607 uid=0 auid=0 ses=35 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345726801.770:120112): user pid=3670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345726801.771:120113): user pid=3670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345726801.771:120114): pid=3670 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=36 >type=USER_START msg=audit(1345726801.777:120115): user pid=3670 uid=0 auid=0 ses=36 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345726801.805:120116): user pid=3670 uid=0 auid=0 ses=36 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345726801.805:120117): user pid=3670 uid=0 auid=0 ses=36 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345726861.809:120118): user pid=3679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345726861.809:120119): user pid=3679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345726861.810:120120): pid=3679 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=37 >type=USER_START msg=audit(1345726861.816:120121): user pid=3679 uid=0 auid=0 ses=37 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345726861.827:120122): user pid=3679 uid=0 auid=0 ses=37 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345726861.827:120123): user pid=3679 uid=0 auid=0 ses=37 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345727401.833:120124): user pid=3766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345727401.834:120125): user pid=3766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345727401.834:120126): pid=3766 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=38 >type=USER_START msg=audit(1345727401.840:120127): user pid=3766 uid=0 auid=0 ses=38 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345727401.910:120128): user pid=3766 uid=0 auid=0 ses=38 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345727401.910:120129): user pid=3766 uid=0 auid=0 ses=38 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345728001.918:120130): user pid=3829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345728001.918:120131): user pid=3829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345728001.919:120132): pid=3829 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=39 >type=USER_START msg=audit(1345728001.923:120133): user pid=3829 uid=0 auid=0 ses=39 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345728001.974:120134): user pid=3829 uid=0 auid=0 ses=39 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345728001.974:120135): user pid=3829 uid=0 auid=0 ses=39 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345728601.981:120136): user pid=3892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345728601.981:120137): user pid=3892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345728601.982:120138): pid=3892 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=40 >type=USER_START msg=audit(1345728601.987:120139): user pid=3892 uid=0 auid=0 ses=40 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345728602.047:120140): user pid=3892 uid=0 auid=0 ses=40 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345728602.047:120141): user pid=3892 uid=0 auid=0 ses=40 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345729201.054:120142): user pid=3956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345729201.054:120143): user pid=3956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345729201.054:120144): pid=3956 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=41 >type=USER_START msg=audit(1345729201.064:120145): user pid=3956 uid=0 auid=0 ses=41 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345729201.081:120146): user pid=3956 uid=0 auid=0 ses=41 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345729201.081:120147): user pid=3956 uid=0 auid=0 ses=41 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345729801.089:120148): user pid=4019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345729801.089:120149): user pid=4019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345729801.090:120150): pid=4019 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=42 >type=USER_START msg=audit(1345729801.093:120151): user pid=4019 uid=0 auid=0 ses=42 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345729801.167:120152): user pid=4019 uid=0 auid=0 ses=42 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345729801.167:120153): user pid=4019 uid=0 auid=0 ses=42 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345730401.174:120154): user pid=4082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345730401.174:120155): user pid=4082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345730401.174:120156): pid=4082 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=43 >type=USER_START msg=audit(1345730401.179:120157): user pid=4082 uid=0 auid=0 ses=43 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345730401.198:120158): user pid=4082 uid=0 auid=0 ses=43 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345730401.198:120159): user pid=4082 uid=0 auid=0 ses=43 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345730461.203:120160): user pid=4091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345730461.203:120161): user pid=4091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345730461.204:120162): pid=4091 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=44 >type=USER_START msg=audit(1345730461.209:120163): user pid=4091 uid=0 auid=0 ses=44 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345730461.221:120164): user pid=4091 uid=0 auid=0 ses=44 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345730461.221:120165): user pid=4091 uid=0 auid=0 ses=44 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345731001.228:120166): user pid=4157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345731001.228:120167): user pid=4157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345731001.228:120168): pid=4157 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=45 >type=USER_START msg=audit(1345731001.237:120169): user pid=4157 uid=0 auid=0 ses=45 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345731001.297:120170): user pid=4157 uid=0 auid=0 ses=45 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345731001.297:120171): user pid=4157 uid=0 auid=0 ses=45 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345731601.304:120172): user pid=4220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345731601.304:120173): user pid=4220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345731601.304:120174): pid=4220 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=46 >type=USER_START msg=audit(1345731601.309:120175): user pid=4220 uid=0 auid=0 ses=46 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345731601.332:120176): user pid=4220 uid=0 auid=0 ses=46 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345731601.332:120177): user pid=4220 uid=0 auid=0 ses=46 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345732201.339:120178): user pid=4284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345732201.339:120179): user pid=4284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345732201.340:120180): pid=4284 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=47 >type=USER_START msg=audit(1345732201.346:120181): user pid=4284 uid=0 auid=0 ses=47 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345732201.409:120182): user pid=4284 uid=0 auid=0 ses=47 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345732201.409:120183): user pid=4284 uid=0 auid=0 ses=47 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345732801.416:120184): user pid=4347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345732801.416:120185): user pid=4347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345732801.416:120186): pid=4347 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=48 >type=USER_START msg=audit(1345732801.421:120187): user pid=4347 uid=0 auid=0 ses=48 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345732801.473:120188): user pid=4347 uid=0 auid=0 ses=48 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345732801.473:120189): user pid=4347 uid=0 auid=0 ses=48 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345733401.480:120190): user pid=4410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345733401.480:120191): user pid=4410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345733401.481:120192): pid=4410 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=49 >type=USER_START msg=audit(1345733401.487:120193): user pid=4410 uid=0 auid=0 ses=49 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345733401.522:120194): user pid=4410 uid=0 auid=0 ses=49 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345733401.522:120195): user pid=4410 uid=0 auid=0 ses=49 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345734001.533:120196): user pid=4494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345734001.533:120197): user pid=4494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345734001.533:120198): pid=4494 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=50 >type=USER_START msg=audit(1345734001.541:120199): user pid=4494 uid=0 auid=0 ses=50 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345734001.603:120200): user pid=4494 uid=0 auid=0 ses=50 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345734001.603:120201): user pid=4494 uid=0 auid=0 ses=50 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345734061.608:120202): user pid=4503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345734061.608:120203): user pid=4503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345734061.609:120204): pid=4503 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=51 >type=USER_START msg=audit(1345734061.618:120205): user pid=4503 uid=0 auid=0 ses=51 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345734061.634:120206): user pid=4503 uid=0 auid=0 ses=51 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345734061.634:120207): user pid=4503 uid=0 auid=0 ses=51 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345734601.640:120208): user pid=4569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345734601.641:120209): user pid=4569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345734601.641:120210): pid=4569 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=52 >type=USER_START msg=audit(1345734601.646:120211): user pid=4569 uid=0 auid=0 ses=52 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345734601.696:120212): user pid=4569 uid=0 auid=0 ses=52 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345734601.696:120213): user pid=4569 uid=0 auid=0 ses=52 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345735201.703:120214): user pid=4632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345735201.703:120215): user pid=4632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345735201.704:120216): pid=4632 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=53 >type=USER_START msg=audit(1345735201.714:120217): user pid=4632 uid=0 auid=0 ses=53 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345735201.782:120218): user pid=4632 uid=0 auid=0 ses=53 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345735201.782:120219): user pid=4632 uid=0 auid=0 ses=53 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345735801.789:120220): user pid=4695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345735801.789:120221): user pid=4695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345735801.789:120222): pid=4695 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=54 >type=USER_START msg=audit(1345735801.795:120223): user pid=4695 uid=0 auid=0 ses=54 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345735801.822:120224): user pid=4695 uid=0 auid=0 ses=54 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345735801.822:120225): user pid=4695 uid=0 auid=0 ses=54 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345736401.829:120226): user pid=4758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345736401.829:120227): user pid=4758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345736401.829:120228): pid=4758 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=55 >type=USER_START msg=audit(1345736401.835:120229): user pid=4758 uid=0 auid=0 ses=55 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345736401.893:120230): user pid=4758 uid=0 auid=0 ses=55 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345736401.893:120231): user pid=4758 uid=0 auid=0 ses=55 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345737001.900:120232): user pid=4821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345737001.900:120233): user pid=4821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345737001.901:120234): pid=4821 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=56 >type=USER_START msg=audit(1345737001.907:120235): user pid=4821 uid=0 auid=0 ses=56 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345737001.939:120236): user pid=4821 uid=0 auid=0 ses=56 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345737001.939:120237): user pid=4821 uid=0 auid=0 ses=56 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345737181.944:120238): user pid=4842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345737181.944:120239): user pid=4842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345737181.945:120240): pid=4842 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=57 >type=USER_START msg=audit(1345737181.951:120241): user pid=4842 uid=0 auid=0 ses=57 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345737181.975:120242): user pid=4842 uid=0 auid=0 ses=57 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345737181.975:120243): user pid=4842 uid=0 auid=0 ses=57 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345737601.981:120244): user pid=4893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345737601.982:120245): user pid=4893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345737601.982:120246): pid=4893 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=58 >type=USER_START msg=audit(1345737601.988:120247): user pid=4893 uid=0 auid=0 ses=58 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345737602.057:120248): user pid=4893 uid=0 auid=0 ses=58 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345737602.057:120249): user pid=4893 uid=0 auid=0 ses=58 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345737661.062:120250): user pid=4902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345737661.062:120251): user pid=4902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345737661.062:120252): pid=4902 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=59 >type=USER_START msg=audit(1345737661.071:120253): user pid=4902 uid=0 auid=0 ses=59 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345737661.101:120254): user pid=4902 uid=0 auid=0 ses=59 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345737661.101:120255): user pid=4902 uid=0 auid=0 ses=59 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345738201.109:120256): user pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345738201.109:120257): user pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345738201.111:120258): pid=4973 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=60 >type=USER_START msg=audit(1345738201.121:120259): user pid=4973 uid=0 auid=0 ses=60 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345738201.180:120260): user pid=4973 uid=0 auid=0 ses=60 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345738201.180:120261): user pid=4973 uid=0 auid=0 ses=60 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345738801.187:120262): user pid=5036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345738801.187:120263): user pid=5036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345738801.187:120264): pid=5036 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=61 >type=USER_START msg=audit(1345738801.192:120265): user pid=5036 uid=0 auid=0 ses=61 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345738801.210:120266): user pid=5036 uid=0 auid=0 ses=61 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345738801.210:120267): user pid=5036 uid=0 auid=0 ses=61 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345739401.217:120268): user pid=5099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345739401.217:120269): user pid=5099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345739401.217:120270): pid=5099 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=62 >type=USER_START msg=audit(1345739401.222:120271): user pid=5099 uid=0 auid=0 ses=62 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345739401.285:120272): user pid=5099 uid=0 auid=0 ses=62 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345739401.285:120273): user pid=5099 uid=0 auid=0 ses=62 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345740001.292:120274): user pid=5183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345740001.292:120275): user pid=5183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345740001.292:120276): pid=5183 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=63 >type=USER_START msg=audit(1345740001.302:120277): user pid=5183 uid=0 auid=0 ses=63 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345740001.358:120278): user pid=5183 uid=0 auid=0 ses=63 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345740001.358:120279): user pid=5183 uid=0 auid=0 ses=63 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345740601.364:120280): user pid=5246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345740601.364:120281): user pid=5246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345740601.365:120282): pid=5246 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=64 >type=USER_START msg=audit(1345740601.375:120283): user pid=5246 uid=0 auid=0 ses=64 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345740601.398:120284): user pid=5246 uid=0 auid=0 ses=64 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345740601.398:120285): user pid=5246 uid=0 auid=0 ses=64 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345741201.405:120286): user pid=5309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345741201.405:120287): user pid=5309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345741201.406:120288): pid=5309 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=65 >type=USER_START msg=audit(1345741201.416:120289): user pid=5309 uid=0 auid=0 ses=65 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345741201.478:120290): user pid=5309 uid=0 auid=0 ses=65 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345741201.478:120291): user pid=5309 uid=0 auid=0 ses=65 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345741261.483:120292): user pid=5318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345741261.483:120293): user pid=5318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345741261.483:120294): pid=5318 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=66 >type=USER_START msg=audit(1345741261.489:120295): user pid=5318 uid=0 auid=0 ses=66 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345741261.506:120296): user pid=5318 uid=0 auid=0 ses=66 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345741261.506:120297): user pid=5318 uid=0 auid=0 ses=66 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345741801.512:120298): user pid=5388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345741801.513:120299): user pid=5388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345741801.513:120300): pid=5388 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=67 >type=USER_START msg=audit(1345741801.522:120301): user pid=5388 uid=0 auid=0 ses=67 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345741801.592:120302): user pid=5388 uid=0 auid=0 ses=67 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345741801.592:120303): user pid=5388 uid=0 auid=0 ses=67 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345742401.599:120304): user pid=5451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345742401.599:120305): user pid=5451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345742401.599:120306): pid=5451 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=68 >type=USER_START msg=audit(1345742401.608:120307): user pid=5451 uid=0 auid=0 ses=68 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345742401.628:120308): user pid=5451 uid=0 auid=0 ses=68 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345742401.628:120309): user pid=5451 uid=0 auid=0 ses=68 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345743001.635:120310): user pid=5514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345743001.635:120311): user pid=5514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345743001.636:120312): pid=5514 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=69 >type=USER_START msg=audit(1345743001.644:120313): user pid=5514 uid=0 auid=0 ses=69 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345743001.713:120314): user pid=5514 uid=0 auid=0 ses=69 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345743001.714:120315): user pid=5514 uid=0 auid=0 ses=69 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345743601.721:120316): user pid=5572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345743601.721:120317): user pid=5572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345743601.721:120318): pid=5572 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=70 >type=USER_START msg=audit(1345743601.733:120319): user pid=5572 uid=0 auid=0 ses=70 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345743601.762:120320): user pid=5572 uid=0 auid=0 ses=70 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345743601.762:120321): user pid=5572 uid=0 auid=0 ses=70 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345744201.770:120322): user pid=5636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345744201.770:120323): user pid=5636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345744201.771:120324): pid=5636 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=71 >type=USER_START msg=audit(1345744201.782:120325): user pid=5636 uid=0 auid=0 ses=71 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345744201.850:120326): user pid=5636 uid=0 auid=0 ses=71 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345744201.850:120327): user pid=5636 uid=0 auid=0 ses=71 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345744801.857:120328): user pid=5699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345744801.857:120329): user pid=5699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345744801.858:120330): pid=5699 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=72 >type=USER_START msg=audit(1345744801.870:120331): user pid=5699 uid=0 auid=0 ses=72 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345744801.948:120332): user pid=5699 uid=0 auid=0 ses=72 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345744801.948:120333): user pid=5699 uid=0 auid=0 ses=72 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345744861.953:120334): user pid=5708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345744861.953:120335): user pid=5708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345744861.953:120336): pid=5708 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=73 >type=USER_START msg=audit(1345744861.964:120337): user pid=5708 uid=0 auid=0 ses=73 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345744861.984:120338): user pid=5708 uid=0 auid=0 ses=73 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345744861.984:120339): user pid=5708 uid=0 auid=0 ses=73 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345745401.991:120340): user pid=5778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345745401.991:120341): user pid=5778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345745401.991:120342): pid=5778 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=74 >type=USER_START msg=audit(1345745402.000:120343): user pid=5778 uid=0 auid=0 ses=74 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345745402.025:120344): user pid=5778 uid=0 auid=0 ses=74 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345745402.026:120345): user pid=5778 uid=0 auid=0 ses=74 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345746001.033:120346): user pid=5862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345746001.033:120347): user pid=5862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345746001.033:120348): pid=5862 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=75 >type=USER_START msg=audit(1345746001.039:120349): user pid=5862 uid=0 auid=0 ses=75 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345746001.112:120350): user pid=5862 uid=0 auid=0 ses=75 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345746001.112:120351): user pid=5862 uid=0 auid=0 ses=75 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345746601.119:120352): user pid=5925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345746601.119:120353): user pid=5925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345746601.120:120354): pid=5925 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=76 >type=USER_START msg=audit(1345746601.124:120355): user pid=5925 uid=0 auid=0 ses=76 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345746601.201:120356): user pid=5925 uid=0 auid=0 ses=76 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345746601.201:120357): user pid=5925 uid=0 auid=0 ses=76 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345747201.208:120358): user pid=5988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345747201.208:120359): user pid=5988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345747201.208:120360): pid=5988 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=77 >type=USER_START msg=audit(1345747201.213:120361): user pid=5988 uid=0 auid=0 ses=77 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345747201.231:120362): user pid=5988 uid=0 auid=0 ses=77 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345747201.231:120363): user pid=5988 uid=0 auid=0 ses=77 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345747801.238:120364): user pid=6051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345747801.238:120365): user pid=6051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345747801.238:120366): pid=6051 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=78 >type=USER_START msg=audit(1345747801.247:120367): user pid=6051 uid=0 auid=0 ses=78 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345747801.304:120368): user pid=6051 uid=0 auid=0 ses=78 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345747801.304:120369): user pid=6051 uid=0 auid=0 ses=78 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345748401.311:120370): user pid=6114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345748401.311:120371): user pid=6114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345748401.312:120372): pid=6114 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=79 >type=USER_START msg=audit(1345748401.318:120373): user pid=6114 uid=0 auid=0 ses=79 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345748401.348:120374): user pid=6114 uid=0 auid=0 ses=79 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345748401.348:120375): user pid=6114 uid=0 auid=0 ses=79 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345748461.353:120376): user pid=6123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345748461.353:120377): user pid=6123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345748461.354:120378): pid=6123 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=80 >type=USER_START msg=audit(1345748461.360:120379): user pid=6123 uid=0 auid=0 ses=80 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345748461.377:120380): user pid=6123 uid=0 auid=0 ses=80 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345748461.378:120381): user pid=6123 uid=0 auid=0 ses=80 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345749001.385:120382): user pid=6193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345749001.385:120383): user pid=6193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345749001.385:120384): pid=6193 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=81 >type=USER_START msg=audit(1345749001.393:120385): user pid=6193 uid=0 auid=0 ses=81 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345749001.458:120386): user pid=6193 uid=0 auid=0 ses=81 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345749001.458:120387): user pid=6193 uid=0 auid=0 ses=81 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345749601.465:120388): user pid=6256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345749601.465:120389): user pid=6256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345749601.465:120390): pid=6256 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=82 >type=USER_START msg=audit(1345749601.476:120391): user pid=6256 uid=0 auid=0 ses=82 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345749601.549:120392): user pid=6256 uid=0 auid=0 ses=82 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345749601.549:120393): user pid=6256 uid=0 auid=0 ses=82 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345750201.555:120394): user pid=6320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345750201.556:120395): user pid=6320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345750201.556:120396): pid=6320 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=83 >type=USER_START msg=audit(1345750201.564:120397): user pid=6320 uid=0 auid=0 ses=83 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345750201.586:120398): user pid=6320 uid=0 auid=0 ses=83 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345750201.586:120399): user pid=6320 uid=0 auid=0 ses=83 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345750801.593:120400): user pid=6383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345750801.593:120401): user pid=6383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345750801.594:120402): pid=6383 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=84 >type=USER_START msg=audit(1345750801.602:120403): user pid=6383 uid=0 auid=0 ses=84 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345750801.677:120404): user pid=6383 uid=0 auid=0 ses=84 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345750801.677:120405): user pid=6383 uid=0 auid=0 ses=84 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345751401.699:120406): user pid=6670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345751401.699:120407): user pid=6670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345751401.705:120408): pid=6670 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=85 >type=USER_START msg=audit(1345751401.711:120409): user pid=6670 uid=0 auid=0 ses=85 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345751401.793:120410): user pid=6670 uid=0 auid=0 ses=85 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345751401.793:120411): user pid=6670 uid=0 auid=0 ses=85 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345752001.807:120412): user pid=6754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345752001.807:120413): user pid=6754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345752001.808:120414): pid=6754 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=86 >type=USER_START msg=audit(1345752001.813:120415): user pid=6754 uid=0 auid=0 ses=86 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345752001.841:120416): user pid=6754 uid=0 auid=0 ses=86 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345752001.842:120417): user pid=6754 uid=0 auid=0 ses=86 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345752061.847:120418): user pid=6763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345752061.847:120419): user pid=6763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345752061.847:120420): pid=6763 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=87 >type=USER_START msg=audit(1345752061.853:120421): user pid=6763 uid=0 auid=0 ses=87 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345752061.870:120422): user pid=6763 uid=0 auid=0 ses=87 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345752061.870:120423): user pid=6763 uid=0 auid=0 ses=87 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345752601.877:120424): user pid=6829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345752601.877:120425): user pid=6829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345752601.877:120426): pid=6829 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=88 >type=USER_START msg=audit(1345752601.892:120427): user pid=6829 uid=0 auid=0 ses=88 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345752601.972:120428): user pid=6829 uid=0 auid=0 ses=88 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345752601.972:120429): user pid=6829 uid=0 auid=0 ses=88 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345753201.979:120430): user pid=6892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345753201.979:120431): user pid=6892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345753201.980:120432): pid=6892 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=89 >type=USER_START msg=audit(1345753201.992:120433): user pid=6892 uid=0 auid=0 ses=89 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345753202.028:120434): user pid=6892 uid=0 auid=0 ses=89 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345753202.028:120435): user pid=6892 uid=0 auid=0 ses=89 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345753801.035:120436): user pid=6955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345753801.035:120437): user pid=6955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345753801.036:120438): pid=6955 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=90 >type=USER_START msg=audit(1345753801.048:120439): user pid=6955 uid=0 auid=0 ses=90 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345753801.126:120440): user pid=6955 uid=0 auid=0 ses=90 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345753801.126:120441): user pid=6955 uid=0 auid=0 ses=90 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345754401.133:120442): user pid=7018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345754401.133:120443): user pid=7018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345754401.133:120444): pid=7018 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=91 >type=USER_START msg=audit(1345754401.144:120445): user pid=7018 uid=0 auid=0 ses=91 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345754401.215:120446): user pid=7018 uid=0 auid=0 ses=91 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345754401.215:120447): user pid=7018 uid=0 auid=0 ses=91 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345755001.222:120448): user pid=7087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345755001.222:120449): user pid=7087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345755001.223:120450): pid=7087 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=92 >type=USER_START msg=audit(1345755001.235:120451): user pid=7087 uid=0 auid=0 ses=92 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345755001.288:120452): user pid=7087 uid=0 auid=0 ses=92 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345755001.288:120453): user pid=7087 uid=0 auid=0 ses=92 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345755601.295:120454): user pid=7159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345755601.295:120455): user pid=7159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345755601.295:120456): pid=7159 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=93 >type=USER_START msg=audit(1345755601.303:120457): user pid=7159 uid=0 auid=0 ses=93 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345755601.378:120458): user pid=7159 uid=0 auid=0 ses=93 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345755601.378:120459): user pid=7159 uid=0 auid=0 ses=93 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345755661.383:120460): user pid=7168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345755661.383:120461): user pid=7168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345755661.384:120462): pid=7168 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=94 >type=USER_START msg=audit(1345755661.396:120463): user pid=7168 uid=0 auid=0 ses=94 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345755661.407:120464): user pid=7168 uid=0 auid=0 ses=94 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345755661.407:120465): user pid=7168 uid=0 auid=0 ses=94 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345756201.415:120466): user pid=7238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345756201.415:120467): user pid=7238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345756201.416:120468): pid=7238 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=95 >type=USER_START msg=audit(1345756201.424:120469): user pid=7238 uid=0 auid=0 ses=95 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345756201.493:120470): user pid=7238 uid=0 auid=0 ses=95 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345756201.493:120471): user pid=7238 uid=0 auid=0 ses=95 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345756801.500:120472): user pid=7303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345756801.500:120473): user pid=7303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345756801.500:120474): pid=7303 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=96 >type=USER_START msg=audit(1345756801.506:120475): user pid=7303 uid=0 auid=0 ses=96 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345756801.523:120476): user pid=7303 uid=0 auid=0 ses=96 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345756801.523:120477): user pid=7303 uid=0 auid=0 ses=96 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345757401.529:120478): user pid=7372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345757401.529:120479): user pid=7372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345757401.530:120480): pid=7372 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=97 >type=USER_START msg=audit(1345757401.536:120481): user pid=7372 uid=0 auid=0 ses=97 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345757401.596:120482): user pid=7372 uid=0 auid=0 ses=97 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345757401.596:120483): user pid=7372 uid=0 auid=0 ses=97 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345758001.603:120484): user pid=7457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345758001.604:120485): user pid=7457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345758001.604:120486): pid=7457 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=98 >type=USER_START msg=audit(1345758001.614:120487): user pid=7457 uid=0 auid=0 ses=98 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345758001.640:120488): user pid=7457 uid=0 auid=0 ses=98 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345758001.640:120489): user pid=7457 uid=0 auid=0 ses=98 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345758601.647:120490): user pid=7524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345758601.647:120491): user pid=7524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345758601.648:120492): pid=7524 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=99 >type=USER_START msg=audit(1345758601.652:120493): user pid=7524 uid=0 auid=0 ses=99 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345758601.726:120494): user pid=7524 uid=0 auid=0 ses=99 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345758601.726:120495): user pid=7524 uid=0 auid=0 ses=99 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345759201.733:120496): user pid=7587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345759201.733:120497): user pid=7587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345759201.733:120498): pid=7587 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=100 >type=USER_START msg=audit(1345759201.738:120499): user pid=7587 uid=0 auid=0 ses=100 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345759201.807:120500): user pid=7587 uid=0 auid=0 ses=100 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345759201.807:120501): user pid=7587 uid=0 auid=0 ses=100 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345759261.812:120502): user pid=7596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345759261.812:120503): user pid=7596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345759261.812:120504): pid=7596 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=101 >type=USER_START msg=audit(1345759261.818:120505): user pid=7596 uid=0 auid=0 ses=101 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345759261.829:120506): user pid=7596 uid=0 auid=0 ses=101 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345759261.829:120507): user pid=7596 uid=0 auid=0 ses=101 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345759801.836:120508): user pid=7662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345759801.836:120509): user pid=7662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345759801.837:120510): pid=7662 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=102 >type=USER_START msg=audit(1345759801.848:120511): user pid=7662 uid=0 auid=0 ses=102 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345759801.896:120512): user pid=7662 uid=0 auid=0 ses=102 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345759801.896:120513): user pid=7662 uid=0 auid=0 ses=102 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345760401.903:120514): user pid=7725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345760401.903:120515): user pid=7725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345760401.903:120516): pid=7725 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=103 >type=USER_START msg=audit(1345760401.910:120517): user pid=7725 uid=0 auid=0 ses=103 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345760401.977:120518): user pid=7725 uid=0 auid=0 ses=103 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345760401.977:120519): user pid=7725 uid=0 auid=0 ses=103 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345761001.984:120520): user pid=7788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345761001.984:120521): user pid=7788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345761001.984:120522): pid=7788 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=104 >type=USER_START msg=audit(1345761001.991:120523): user pid=7788 uid=0 auid=0 ses=104 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345761002.020:120524): user pid=7788 uid=0 auid=0 ses=104 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345761002.020:120525): user pid=7788 uid=0 auid=0 ses=104 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345761601.027:120526): user pid=7851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345761601.028:120527): user pid=7851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345761601.028:120528): pid=7851 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=105 >type=USER_START msg=audit(1345761601.036:120529): user pid=7851 uid=0 auid=0 ses=105 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345761601.105:120530): user pid=7851 uid=0 auid=0 ses=105 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345761601.105:120531): user pid=7851 uid=0 auid=0 ses=105 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345762201.113:120532): user pid=7917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345762201.113:120533): user pid=7917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345762201.114:120534): pid=7917 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=106 >type=USER_START msg=audit(1345762201.121:120535): user pid=7917 uid=0 auid=0 ses=106 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345762201.196:120536): user pid=7917 uid=0 auid=0 ses=106 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345762201.196:120537): user pid=7917 uid=0 auid=0 ses=106 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345762801.203:120538): user pid=7995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345762801.203:120539): user pid=7995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345762801.203:120540): pid=7995 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=107 >type=USER_START msg=audit(1345762801.211:120541): user pid=7995 uid=0 auid=0 ses=107 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345762801.242:120542): user pid=7995 uid=0 auid=0 ses=107 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345762801.242:120543): user pid=7995 uid=0 auid=0 ses=107 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345762861.247:120544): user pid=8004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345762861.247:120545): user pid=8004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345762861.247:120546): pid=8004 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=108 >type=USER_START msg=audit(1345762861.255:120547): user pid=8004 uid=0 auid=0 ses=108 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345762861.267:120548): user pid=8004 uid=0 auid=0 ses=108 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345762861.267:120549): user pid=8004 uid=0 auid=0 ses=108 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345763401.274:120550): user pid=8076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345763401.274:120551): user pid=8076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345763401.275:120552): pid=8076 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=109 >type=USER_START msg=audit(1345763401.287:120553): user pid=8076 uid=0 auid=0 ses=109 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345763401.358:120554): user pid=8076 uid=0 auid=0 ses=109 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345763401.358:120555): user pid=8076 uid=0 auid=0 ses=109 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345764001.365:120556): user pid=8161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345764001.365:120557): user pid=8161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345764001.365:120558): pid=8161 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=110 >type=USER_START msg=audit(1345764001.373:120559): user pid=8161 uid=0 auid=0 ses=110 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345764001.439:120560): user pid=8161 uid=0 auid=0 ses=110 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345764001.439:120561): user pid=8161 uid=0 auid=0 ses=110 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345764601.446:120562): user pid=8226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345764601.446:120563): user pid=8226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345764601.446:120564): pid=8226 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=111 >type=USER_START msg=audit(1345764601.454:120565): user pid=8226 uid=0 auid=0 ses=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345764601.489:120566): user pid=8226 uid=0 auid=0 ses=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345764601.489:120567): user pid=8226 uid=0 auid=0 ses=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345765201.496:120568): user pid=8291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345765201.496:120569): user pid=8291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345765201.496:120570): pid=8291 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=112 >type=USER_START msg=audit(1345765201.507:120571): user pid=8291 uid=0 auid=0 ses=112 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345765201.568:120572): user pid=8291 uid=0 auid=0 ses=112 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345765201.568:120573): user pid=8291 uid=0 auid=0 ses=112 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345765801.575:120574): user pid=8354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345765801.576:120575): user pid=8354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345765801.576:120576): pid=8354 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=113 >type=USER_START msg=audit(1345765801.584:120577): user pid=8354 uid=0 auid=0 ses=113 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345765801.606:120578): user pid=8354 uid=0 auid=0 ses=113 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345765801.606:120579): user pid=8354 uid=0 auid=0 ses=113 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345766401.613:120580): user pid=8417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345766401.613:120581): user pid=8417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345766401.614:120582): pid=8417 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=114 >type=USER_START msg=audit(1345766401.621:120583): user pid=8417 uid=0 auid=0 ses=114 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345766401.680:120584): user pid=8417 uid=0 auid=0 ses=114 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345766401.680:120585): user pid=8417 uid=0 auid=0 ses=114 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345766461.685:120586): user pid=8426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345766461.686:120587): user pid=8426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345766461.686:120588): pid=8426 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=115 >type=USER_START msg=audit(1345766461.694:120589): user pid=8426 uid=0 auid=0 ses=115 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345766461.706:120590): user pid=8426 uid=0 auid=0 ses=115 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345766461.706:120591): user pid=8426 uid=0 auid=0 ses=115 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345767001.713:120592): user pid=8492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345767001.713:120593): user pid=8492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345767001.714:120594): pid=8492 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=116 >type=USER_START msg=audit(1345767001.726:120595): user pid=8492 uid=0 auid=0 ses=116 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345767001.787:120596): user pid=8492 uid=0 auid=0 ses=116 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345767001.787:120597): user pid=8492 uid=0 auid=0 ses=116 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345767601.794:120598): user pid=8555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345767601.794:120599): user pid=8555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345767601.794:120600): pid=8555 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=117 >type=USER_START msg=audit(1345767601.806:120601): user pid=8555 uid=0 auid=0 ses=117 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345767601.828:120602): user pid=8555 uid=0 auid=0 ses=117 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345767601.828:120603): user pid=8555 uid=0 auid=0 ses=117 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345768201.835:120604): user pid=8619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345768201.835:120605): user pid=8619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345768201.835:120606): pid=8619 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=118 >type=USER_START msg=audit(1345768201.842:120607): user pid=8619 uid=0 auid=0 ses=118 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345768201.890:120608): user pid=8619 uid=0 auid=0 ses=118 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345768201.890:120609): user pid=8619 uid=0 auid=0 ses=118 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345768801.897:120610): user pid=8694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345768801.897:120611): user pid=8694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345768801.897:120612): pid=8694 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=119 >type=USER_START msg=audit(1345768801.908:120613): user pid=8694 uid=0 auid=0 ses=119 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345768801.972:120614): user pid=8694 uid=0 auid=0 ses=119 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345768801.972:120615): user pid=8694 uid=0 auid=0 ses=119 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345769401.979:120616): user pid=8760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345769401.979:120617): user pid=8760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345769401.980:120618): pid=8760 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=120 >type=USER_START msg=audit(1345769401.992:120619): user pid=8760 uid=0 auid=0 ses=120 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345769402.018:120620): user pid=8760 uid=0 auid=0 ses=120 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345769402.018:120621): user pid=8760 uid=0 auid=0 ses=120 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345770001.027:120622): user pid=8844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345770001.027:120623): user pid=8844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345770001.027:120624): pid=8844 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=121 >type=USER_START msg=audit(1345770001.037:120625): user pid=8844 uid=0 auid=0 ses=121 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345770001.101:120626): user pid=8844 uid=0 auid=0 ses=121 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345770001.101:120627): user pid=8844 uid=0 auid=0 ses=121 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345770061.106:120628): user pid=8853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345770061.106:120629): user pid=8853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345770061.106:120630): pid=8853 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=122 >type=USER_START msg=audit(1345770061.117:120631): user pid=8853 uid=0 auid=0 ses=122 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345770061.128:120632): user pid=8853 uid=0 auid=0 ses=122 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345770061.129:120633): user pid=8853 uid=0 auid=0 ses=122 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345770601.135:120634): user pid=8920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345770601.135:120635): user pid=8920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345770601.136:120636): pid=8920 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=123 >type=USER_START msg=audit(1345770601.142:120637): user pid=8920 uid=0 auid=0 ses=123 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345770601.169:120638): user pid=8920 uid=0 auid=0 ses=123 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345770601.169:120639): user pid=8920 uid=0 auid=0 ses=123 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345771201.176:120640): user pid=8983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345771201.176:120641): user pid=8983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345771201.176:120642): pid=8983 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=124 >type=USER_START msg=audit(1345771201.181:120643): user pid=8983 uid=0 auid=0 ses=124 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345771201.238:120644): user pid=8983 uid=0 auid=0 ses=124 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345771201.238:120645): user pid=8983 uid=0 auid=0 ses=124 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345771801.245:120646): user pid=9047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345771801.245:120647): user pid=9047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345771801.245:120648): pid=9047 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=125 >type=USER_START msg=audit(1345771801.250:120649): user pid=9047 uid=0 auid=0 ses=125 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345771801.312:120650): user pid=9047 uid=0 auid=0 ses=125 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345771801.312:120651): user pid=9047 uid=0 auid=0 ses=125 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345772401.319:120652): user pid=9112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345772401.319:120653): user pid=9112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345772401.319:120654): pid=9112 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=126 >type=USER_START msg=audit(1345772401.325:120655): user pid=9112 uid=0 auid=0 ses=126 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345772401.357:120656): user pid=9112 uid=0 auid=0 ses=126 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345772401.357:120657): user pid=9112 uid=0 auid=0 ses=126 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345773001.364:120658): user pid=9175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345773001.364:120659): user pid=9175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345773001.365:120660): pid=9175 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=127 >type=USER_START msg=audit(1345773001.375:120661): user pid=9175 uid=0 auid=0 ses=127 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345773001.449:120662): user pid=9175 uid=0 auid=0 ses=127 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345773001.449:120663): user pid=9175 uid=0 auid=0 ses=127 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345773601.455:120664): user pid=9238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345773601.456:120665): user pid=9238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345773601.456:120666): pid=9238 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=128 >type=USER_START msg=audit(1345773601.462:120667): user pid=9238 uid=0 auid=0 ses=128 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345773601.521:120668): user pid=9238 uid=0 auid=0 ses=128 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345773601.522:120669): user pid=9238 uid=0 auid=0 ses=128 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345773661.526:120670): user pid=9247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345773661.527:120671): user pid=9247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345773661.527:120672): pid=9247 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=129 >type=USER_START msg=audit(1345773661.533:120673): user pid=9247 uid=0 auid=0 ses=129 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345773661.544:120674): user pid=9247 uid=0 auid=0 ses=129 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345773661.544:120675): user pid=9247 uid=0 auid=0 ses=129 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345774201.551:120676): user pid=9314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345774201.551:120677): user pid=9314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345774201.551:120678): pid=9314 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=130 >type=USER_START msg=audit(1345774201.556:120679): user pid=9314 uid=0 auid=0 ses=130 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345774201.571:120680): user pid=9314 uid=0 auid=0 ses=130 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345774201.571:120681): user pid=9314 uid=0 auid=0 ses=130 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345774801.578:120682): user pid=9377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345774801.578:120683): user pid=9377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345774801.578:120684): pid=9377 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=131 >type=USER_START msg=audit(1345774801.584:120685): user pid=9377 uid=0 auid=0 ses=131 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345774801.643:120686): user pid=9377 uid=0 auid=0 ses=131 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345774801.643:120687): user pid=9377 uid=0 auid=0 ses=131 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345775401.650:120688): user pid=9440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345775401.650:120689): user pid=9440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345775401.650:120690): pid=9440 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=132 >type=USER_START msg=audit(1345775401.655:120691): user pid=9440 uid=0 auid=0 ses=132 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345775401.690:120692): user pid=9440 uid=0 auid=0 ses=132 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345775401.691:120693): user pid=9440 uid=0 auid=0 ses=132 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345776001.707:120694): user pid=9525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345776001.708:120695): user pid=9525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345776001.709:120696): pid=9525 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=133 >type=USER_START msg=audit(1345776001.721:120697): user pid=9525 uid=0 auid=0 ses=133 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345776001.782:120698): user pid=9525 uid=0 auid=0 ses=133 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345776001.782:120699): user pid=9525 uid=0 auid=0 ses=133 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345776266.744:120700): user pid=8721 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1345776266.744:120701): user pid=8721 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1345776266.745:120702): user pid=8721 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1345776266.745:120703): user pid=8721 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345776266.745:120704): user pid=8721 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8721 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345776266.745:120705): user pid=8721 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8721 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345776266.745:120706): user pid=8721 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8721 suid=0 rport=42621 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1345776266.895:120707): table=nat family=2 entries=7 >type=SYSCALL msg=audit(1345776266.895:120707): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=13e0800 items=0 ppid=9604 pid=9617 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345776266.898:120708): table=nat family=2 entries=6 >type=SYSCALL msg=audit(1345776266.898:120708): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=173f800 items=0 ppid=9604 pid=9618 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345776266.900:120709): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1345776266.900:120709): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=c745e0 items=0 ppid=9604 pid=9619 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345776266.918:120710): table=mangle family=2 entries=7 >type=SYSCALL msg=audit(1345776266.918:120710): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=c8c290 items=0 ppid=9604 pid=9627 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345776266.925:120711): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1345776266.925:120711): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1b157f0 items=0 ppid=9604 pid=9630 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345776266.928:120712): table=filter family=2 entries=5 >type=SYSCALL msg=audit(1345776266.928:120712): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=186f7f0 items=0 ppid=9604 pid=9631 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345776266.930:120713): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1345776266.930:120713): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=b6f290 items=0 ppid=9604 pid=9632 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345776266.933:120714): table=filter family=2 entries=6 >type=SYSCALL msg=audit(1345776266.933:120714): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=976e50 items=0 ppid=9604 pid=9633 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345776266.935:120715): table=filter family=2 entries=7 >type=SYSCALL msg=audit(1345776266.935:120715): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=241dfc0 items=0 ppid=9604 pid=9634 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345776266.938:120716): table=filter family=2 entries=8 >type=SYSCALL msg=audit(1345776266.938:120716): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=e1d920 items=0 ppid=9604 pid=9635 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345776266.940:120717): table=filter family=2 entries=9 >type=SYSCALL msg=audit(1345776266.940:120717): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1f1da90 items=0 ppid=9604 pid=9636 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345776266.942:120718): table=filter family=2 entries=10 >type=SYSCALL msg=audit(1345776266.942:120718): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=a667d0 items=0 ppid=9604 pid=9637 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345776266.945:120719): table=filter family=2 entries=11 >type=SYSCALL msg=audit(1345776266.945:120719): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=153b940 items=0 ppid=9604 pid=9638 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345776266.947:120720): table=filter family=2 entries=12 >type=SYSCALL msg=audit(1345776266.947:120720): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=195f550 items=0 ppid=9604 pid=9639 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345776266.950:120721): table=nat family=2 entries=4 >type=SYSCALL msg=audit(1345776266.950:120721): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=2186620 items=0 ppid=9604 pid=9640 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345776266.952:120722): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1345776266.952:120722): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1d22800 items=0 ppid=9604 pid=9641 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345776266.955:120723): table=nat family=2 entries=6 >type=SYSCALL msg=audit(1345776266.955:120723): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1644700 items=0 ppid=9604 pid=9642 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345776267.476:120724): table=filter family=10 entries=0 >type=NETFILTER_CFG msg=audit(1345776267.476:120724): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1345776267.476:120724): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1345776267.476:120724): table=mangle family=2 entries=0 >type=SYSCALL msg=audit(1345776267.476:120724): arch=c000003e syscall=56 success=yes exit=9691 a0=6c020011 a1=7f53b40fb2c0 a2=8 a3=a7373 items=0 ppid=1 pid=9615 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=SYSCALL msg=audit(1345776267.476:120725): arch=c000003e syscall=56 success=yes exit=0 a0=6c020011 a1=7f53b40fb2c0 a2=8 a3=a7373 items=0 ppid=9615 pid=9691 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=FD_PAIR msg=audit(1345776267.476:120725): fd0=0 fd1=0 >type=USER_ACCT msg=audit(1345776601.806:120726): user pid=9770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345776601.807:120727): user pid=9770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345776601.812:120728): pid=9770 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=134 >type=USER_START msg=audit(1345776601.818:120729): user pid=9770 uid=0 auid=0 ses=134 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345776601.887:120730): user pid=9770 uid=0 auid=0 ses=134 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345776601.887:120731): user pid=9770 uid=0 auid=0 ses=134 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345777201.899:120732): user pid=9838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345777201.899:120733): user pid=9838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345777201.900:120734): pid=9838 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=135 >type=USER_START msg=audit(1345777201.910:120735): user pid=9838 uid=0 auid=0 ses=135 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345777201.930:120736): user pid=9838 uid=0 auid=0 ses=135 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345777201.930:120737): user pid=9838 uid=0 auid=0 ses=135 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345777261.935:120738): user pid=9847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345777261.935:120739): user pid=9847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345777261.935:120740): pid=9847 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=136 >type=USER_START msg=audit(1345777261.940:120741): user pid=9847 uid=0 auid=0 ses=136 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345777261.958:120742): user pid=9847 uid=0 auid=0 ses=136 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345777261.959:120743): user pid=9847 uid=0 auid=0 ses=136 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SYSTEM_RUNLEVEL msg=audit(1345777626.410:120744): user pid=17850 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:shutdown_t:s0-s0:c0.c1023 msg='old-level=3 new-level=6 exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success' >type=SYSTEM_SHUTDOWN msg=audit(1345777626.411:120745): user pid=17850 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:shutdown_t:s0-s0:c0.c1023 msg='init exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1345777627.906:120746): user pid=7211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=7211 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345777627.906:120747): user pid=7211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=7211 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1345777628.013:120748): user pid=7873 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1345777628.013:120749): user pid=7873 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1345777628.016:120750): user pid=7873 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1345777628.016:120751): user pid=7873 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1345777628.017:120752): user pid=7873 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=7873 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345777628.017:120753): user pid=7873 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=7873 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345777628.017:120754): user pid=7873 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7873 suid=0 rport=42552 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=DAEMON_END msg=audit(1345777628.550:4071): auditd normal halt, sending auid=0 pid=18049 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1345777776.847:9074): auditd start, ver=2.2 format=raw kernel=2.6.32-298.el6.x86_64 auid=4294967295 pid=8146 subj=system_u:system_r:auditd_t:s0 res=success >type=CONFIG_CHANGE msg=audit(1345777776.972:119095): audit_backlog_limit=320 old=256 auid=4294967295 ses=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=USER_ACCT msg=audit(1345777802.023:119096): user pid=8169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345777802.024:119097): user pid=8169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345777802.029:119098): pid=8169 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1 >type=USER_START msg=audit(1345777802.036:119099): user pid=8169 uid=0 auid=0 ses=1 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345777802.110:119100): user pid=8169 uid=0 auid=0 ses=1 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345777802.110:119101): user pid=8169 uid=0 auid=0 ses=1 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345778401.123:119102): user pid=8232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345778401.123:119103): user pid=8232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345778401.124:119104): pid=8232 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2 >type=USER_START msg=audit(1345778401.129:119105): user pid=8232 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345778401.195:119106): user pid=8232 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345778401.195:119107): user pid=8232 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345779001.202:119108): user pid=8295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345779001.202:119109): user pid=8295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345779001.202:119110): pid=8295 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3 >type=USER_START msg=audit(1345779001.211:119111): user pid=8295 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345779001.240:119112): user pid=8295 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345779001.241:119113): user pid=8295 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345779601.247:119114): user pid=8358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345779601.247:119115): user pid=8358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345779601.248:119116): pid=8358 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4 >type=USER_START msg=audit(1345779601.253:119117): user pid=8358 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345779601.322:119118): user pid=8358 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345779601.322:119119): user pid=8358 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345780201.329:119120): user pid=8421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345780201.329:119121): user pid=8421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345780201.329:119122): pid=8421 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=5 >type=USER_START msg=audit(1345780201.334:119123): user pid=8421 uid=0 auid=0 ses=5 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345780201.366:119124): user pid=8421 uid=0 auid=0 ses=5 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345780201.366:119125): user pid=8421 uid=0 auid=0 ses=5 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345780801.373:119126): user pid=8484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345780801.373:119127): user pid=8484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345780801.374:119128): pid=8484 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=6 >type=USER_START msg=audit(1345780801.379:119129): user pid=8484 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345780801.443:119130): user pid=8484 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345780801.443:119131): user pid=8484 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345780861.448:119132): user pid=8493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345780861.448:119133): user pid=8493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345780861.448:119134): pid=8493 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=7 >type=USER_START msg=audit(1345780861.453:119135): user pid=8493 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345780861.534:119136): user pid=8493 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345780861.534:119137): user pid=8493 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345781401.541:119138): user pid=8559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345781401.541:119139): user pid=8559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345781401.542:119140): pid=8559 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=8 >type=USER_START msg=audit(1345781401.549:119141): user pid=8559 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345781401.616:119142): user pid=8559 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345781401.616:119143): user pid=8559 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345782001.622:119144): user pid=8622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345782001.623:119145): user pid=8622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345782001.623:119146): pid=8622 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=9 >type=USER_START msg=audit(1345782001.630:119147): user pid=8622 uid=0 auid=0 ses=9 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345782001.663:119148): user pid=8622 uid=0 auid=0 ses=9 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345782001.663:119149): user pid=8622 uid=0 auid=0 ses=9 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345782601.670:119150): user pid=8685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345782601.670:119151): user pid=8685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345782601.670:119152): pid=8685 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=10 >type=USER_START msg=audit(1345782601.677:119153): user pid=8685 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345782601.744:119154): user pid=8685 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345782601.744:119155): user pid=8685 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345783201.751:119156): user pid=8748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345783201.751:119157): user pid=8748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345783201.751:119158): pid=8748 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=11 >type=USER_START msg=audit(1345783201.756:119159): user pid=8748 uid=0 auid=0 ses=11 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345783201.816:119160): user pid=8748 uid=0 auid=0 ses=11 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345783201.816:119161): user pid=8748 uid=0 auid=0 ses=11 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345783801.823:119162): user pid=8812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345783801.824:119163): user pid=8812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345783801.825:119164): pid=8812 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=12 >type=USER_START msg=audit(1345783801.835:119165): user pid=8812 uid=0 auid=0 ses=12 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345783801.860:119166): user pid=8812 uid=0 auid=0 ses=12 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345783801.860:119167): user pid=8812 uid=0 auid=0 ses=12 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345784401.866:119168): user pid=8875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345784401.867:119169): user pid=8875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345784401.867:119170): pid=8875 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=13 >type=USER_START msg=audit(1345784401.874:119171): user pid=8875 uid=0 auid=0 ses=13 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345784401.921:119172): user pid=8875 uid=0 auid=0 ses=13 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345784401.921:119173): user pid=8875 uid=0 auid=0 ses=13 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345784461.926:119174): user pid=8884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345784461.926:119175): user pid=8884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345784461.926:119176): pid=8884 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=14 >type=USER_START msg=audit(1345784461.933:119177): user pid=8884 uid=0 auid=0 ses=14 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345784461.946:119178): user pid=8884 uid=0 auid=0 ses=14 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345784461.946:119179): user pid=8884 uid=0 auid=0 ses=14 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345785001.955:119180): user pid=8971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345785001.955:119181): user pid=8971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345785001.955:119182): pid=8971 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=15 >type=USER_START msg=audit(1345785001.963:119183): user pid=8971 uid=0 auid=0 ses=15 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345785001.986:119184): user pid=8971 uid=0 auid=0 ses=15 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345785001.986:119185): user pid=8971 uid=0 auid=0 ses=15 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345785601.993:119186): user pid=9034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345785601.994:119187): user pid=9034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345785601.994:119188): pid=9034 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=16 >type=USER_START msg=audit(1345785601.999:119189): user pid=9034 uid=0 auid=0 ses=16 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345785602.058:119190): user pid=9034 uid=0 auid=0 ses=16 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345785602.058:119191): user pid=9034 uid=0 auid=0 ses=16 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345786201.064:119192): user pid=9097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345786201.065:119193): user pid=9097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345786201.065:119194): pid=9097 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=17 >type=USER_START msg=audit(1345786201.070:119195): user pid=9097 uid=0 auid=0 ses=17 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345786201.138:119196): user pid=9097 uid=0 auid=0 ses=17 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345786201.139:119197): user pid=9097 uid=0 auid=0 ses=17 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345786801.145:119198): user pid=9160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345786801.145:119199): user pid=9160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345786801.146:119200): pid=9160 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=18 >type=USER_START msg=audit(1345786801.151:119201): user pid=9160 uid=0 auid=0 ses=18 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345786801.182:119202): user pid=9160 uid=0 auid=0 ses=18 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345786801.182:119203): user pid=9160 uid=0 auid=0 ses=18 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345787401.189:119204): user pid=9223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345787401.189:119205): user pid=9223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345787401.189:119206): pid=9223 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=19 >type=USER_START msg=audit(1345787401.198:119207): user pid=9223 uid=0 auid=0 ses=19 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345787401.260:119208): user pid=9223 uid=0 auid=0 ses=19 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345787401.260:119209): user pid=9223 uid=0 auid=0 ses=19 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345788001.266:119210): user pid=9286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345788001.267:119211): user pid=9286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345788001.267:119212): pid=9286 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=20 >type=USER_START msg=audit(1345788001.272:119213): user pid=9286 uid=0 auid=0 ses=20 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345788001.357:119214): user pid=9286 uid=0 auid=0 ses=20 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345788001.357:119215): user pid=9286 uid=0 auid=0 ses=20 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345788061.362:119216): user pid=9295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345788061.362:119217): user pid=9295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345788061.363:119218): pid=9295 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=21 >type=USER_START msg=audit(1345788061.368:119219): user pid=9295 uid=0 auid=0 ses=21 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345788061.381:119220): user pid=9295 uid=0 auid=0 ses=21 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345788061.381:119221): user pid=9295 uid=0 auid=0 ses=21 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345788601.387:119222): user pid=9361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345788601.387:119223): user pid=9361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345788601.387:119224): pid=9361 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=22 >type=USER_START msg=audit(1345788601.395:119225): user pid=9361 uid=0 auid=0 ses=22 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345788601.429:119226): user pid=9361 uid=0 auid=0 ses=22 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345788601.429:119227): user pid=9361 uid=0 auid=0 ses=22 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345789201.435:119228): user pid=9424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345789201.435:119229): user pid=9424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345789201.436:119230): pid=9424 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=23 >type=USER_START msg=audit(1345789201.443:119231): user pid=9424 uid=0 auid=0 ses=23 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345789201.502:119232): user pid=9424 uid=0 auid=0 ses=23 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345789201.503:119233): user pid=9424 uid=0 auid=0 ses=23 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345789801.509:119234): user pid=9488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345789801.509:119235): user pid=9488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345789801.509:119236): pid=9488 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=24 >type=USER_START msg=audit(1345789801.517:119237): user pid=9488 uid=0 auid=0 ses=24 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345789801.554:119238): user pid=9488 uid=0 auid=0 ses=24 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345789801.554:119239): user pid=9488 uid=0 auid=0 ses=24 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345790401.561:119240): user pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345790401.561:119241): user pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345790401.561:119242): pid=9551 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=25 >type=USER_START msg=audit(1345790401.569:119243): user pid=9551 uid=0 auid=0 ses=25 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345790401.631:119244): user pid=9551 uid=0 auid=0 ses=25 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345790401.631:119245): user pid=9551 uid=0 auid=0 ses=25 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345791001.637:119246): user pid=9635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345791001.637:119247): user pid=9635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345791001.637:119248): pid=9635 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=26 >type=USER_START msg=audit(1345791001.645:119249): user pid=9635 uid=0 auid=0 ses=26 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345791001.705:119250): user pid=9635 uid=0 auid=0 ses=26 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345791001.705:119251): user pid=9635 uid=0 auid=0 ses=26 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345791601.711:119252): user pid=9698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345791601.711:119253): user pid=9698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345791601.712:119254): pid=9698 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=27 >type=USER_START msg=audit(1345791601.719:119255): user pid=9698 uid=0 auid=0 ses=27 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345791601.759:119256): user pid=9698 uid=0 auid=0 ses=27 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345791601.760:119257): user pid=9698 uid=0 auid=0 ses=27 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345791661.764:119258): user pid=9707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345791661.764:119259): user pid=9707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345791661.765:119260): pid=9707 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=28 >type=USER_START msg=audit(1345791661.772:119261): user pid=9707 uid=0 auid=0 ses=28 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345791661.783:119262): user pid=9707 uid=0 auid=0 ses=28 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345791661.783:119263): user pid=9707 uid=0 auid=0 ses=28 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345792201.790:119264): user pid=9774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345792201.790:119265): user pid=9774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345792201.790:119266): pid=9774 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=29 >type=USER_START msg=audit(1345792201.795:119267): user pid=9774 uid=0 auid=0 ses=29 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345792201.842:119268): user pid=9774 uid=0 auid=0 ses=29 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345792201.842:119269): user pid=9774 uid=0 auid=0 ses=29 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345792801.848:119270): user pid=9837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345792801.849:119271): user pid=9837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345792801.849:119272): pid=9837 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=30 >type=USER_START msg=audit(1345792801.854:119273): user pid=9837 uid=0 auid=0 ses=30 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345792801.889:119274): user pid=9837 uid=0 auid=0 ses=30 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345792801.889:119275): user pid=9837 uid=0 auid=0 ses=30 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345793401.896:119276): user pid=9900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345793401.896:119277): user pid=9900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345793401.896:119278): pid=9900 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=31 >type=USER_START msg=audit(1345793401.901:119279): user pid=9900 uid=0 auid=0 ses=31 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345793401.953:119280): user pid=9900 uid=0 auid=0 ses=31 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345793401.953:119281): user pid=9900 uid=0 auid=0 ses=31 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345794001.960:119282): user pid=9963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345794001.960:119283): user pid=9963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345794001.960:119284): pid=9963 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=32 >type=USER_START msg=audit(1345794001.965:119285): user pid=9963 uid=0 auid=0 ses=32 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345794002.017:119286): user pid=9963 uid=0 auid=0 ses=32 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345794002.017:119287): user pid=9963 uid=0 auid=0 ses=32 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRYPTO_KEY_USER msg=audit(1345794004.747:119288): user pid=9967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=9967 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.20 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345794004.747:119289): user pid=9967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=9967 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.20 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345794004.748:119290): user pid=9966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=9967 suid=74 rport=56703 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.20 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345794004.749:119291): user pid=9966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=9967 suid=74 rport=56703 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.20 terminal=? res=success' >type=USER_AUTH msg=audit(1345794047.457:119292): user pid=9966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.20 addr=10.66.5.20 terminal=ssh res=success' >type=USER_ACCT msg=audit(1345794047.460:119293): user pid=9966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.20 addr=10.66.5.20 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345794047.461:119294): user pid=9966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9967 suid=74 rport=56703 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.20 terminal=? res=success' >type=USER_AUTH msg=audit(1345794047.462:119295): user pid=9966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.20 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1345794047.462:119296): user pid=9966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.20 addr=10.66.5.20 terminal=ssh res=success' >type=LOGIN msg=audit(1345794047.462:119297): pid=9966 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=33 >type=USER_ROLE_CHANGE msg=audit(1345794047.555:119298): user pid=9966 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.5.20 addr=10.66.5.20 terminal=ssh res=success' >type=USER_START msg=audit(1345794047.558:119299): user pid=9966 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.20 addr=10.66.5.20 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1345794047.593:119300): user pid=9970 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.20 addr=10.66.5.20 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1345794047.594:119301): user pid=9970 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.20 addr=10.66.5.20 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1345794047.594:119302): user pid=9970 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=9970 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.20 terminal=pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1345794047.594:119303): user pid=9970 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=9970 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.20 terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1345794047.594:119304): user pid=9970 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.20 addr=10.66.5.20 terminal=ssh res=success' >type=USER_ACCT msg=audit(1345794601.043:119305): user pid=10048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345794601.043:119306): user pid=10048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345794601.044:119307): pid=10048 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=34 >type=USER_START msg=audit(1345794601.052:119308): user pid=10048 uid=0 auid=0 ses=34 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345794601.099:119309): user pid=10048 uid=0 auid=0 ses=34 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345794601.099:119310): user pid=10048 uid=0 auid=0 ses=34 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRYPTO_KEY_USER msg=audit(1345794693.767:119311): user pid=10058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=10058 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345794693.767:119312): user pid=10058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=10058 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345794693.768:119313): user pid=10057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=10058 suid=74 rport=60504 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345794693.768:119314): user pid=10057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=10058 suid=74 rport=60504 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1345794698.489:119315): user pid=10057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1345794701.699:119316): user pid=10057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1345794701.702:119317): user pid=10057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345794701.702:119318): user pid=10057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10058 suid=74 rport=60504 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1345794701.703:119319): user pid=10057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1345794701.703:119320): user pid=10057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1345794701.703:119321): pid=10057 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=35 >type=USER_ROLE_CHANGE msg=audit(1345794701.769:119322): user pid=10057 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1345794701.772:119323): user pid=10057 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1345794701.804:119324): user pid=10061 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=/dev/pts/1 res=success' >type=USER_START msg=audit(1345794701.804:119325): user pid=10061 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=/dev/pts/1 res=success' >type=CRYPTO_KEY_USER msg=audit(1345794701.805:119326): user pid=10061 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=10061 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=pts/1 res=success' >type=CRYPTO_KEY_USER msg=audit(1345794701.805:119327): user pid=10061 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=10061 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=pts/1 res=success' >type=CRED_REFR msg=audit(1345794701.806:119328): user pid=10061 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1345794837.874:119329): user pid=10057 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1345794837.874:119330): user pid=10057 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1345794837.875:119331): user pid=10057 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=USER_LOGOUT msg=audit(1345794837.875:119332): user pid=10057 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=CRYPTO_KEY_USER msg=audit(1345794837.875:119333): user pid=10057 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=10057 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345794837.875:119334): user pid=10057 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=10057 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345794837.875:119335): user pid=10057 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10057 suid=0 rport=60504 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_ACCT msg=audit(1345795201.122:119336): user pid=10142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345795201.122:119337): user pid=10142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345795201.128:119338): pid=10142 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=36 >type=USER_START msg=audit(1345795201.134:119339): user pid=10142 uid=0 auid=0 ses=36 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345795201.217:119340): user pid=10142 uid=0 auid=0 ses=36 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345795201.218:119341): user pid=10142 uid=0 auid=0 ses=36 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345795261.223:119342): user pid=10153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345795261.223:119343): user pid=10153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345795261.223:119344): pid=10153 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=37 >type=USER_START msg=audit(1345795261.228:119345): user pid=10153 uid=0 auid=0 ses=37 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345795261.249:119346): user pid=10153 uid=0 auid=0 ses=37 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345795261.249:119347): user pid=10153 uid=0 auid=0 ses=37 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345795801.270:119348): user pid=10299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345795801.270:119349): user pid=10299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345795801.273:119350): pid=10299 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=38 >type=USER_START msg=audit(1345795801.281:119351): user pid=10299 uid=0 auid=0 ses=38 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345795801.364:119352): user pid=10299 uid=0 auid=0 ses=38 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345795801.365:119353): user pid=10299 uid=0 auid=0 ses=38 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRYPTO_KEY_USER msg=audit(1345796071.995:119354): user pid=10619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=10619 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345796071.995:119355): user pid=10619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=10619 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345796071.997:119356): user pid=10618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=10619 suid=74 rport=35002 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345796071.997:119357): user pid=10618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=10619 suid=74 rport=35002 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1345796075.658:119358): user pid=10618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1345796078.515:119359): user pid=10618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1345796078.518:119360): user pid=10618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345796078.518:119361): user pid=10618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10619 suid=74 rport=35002 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1345796078.519:119362): user pid=10618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1345796078.519:119363): user pid=10618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1345796078.519:119364): pid=10618 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=39 >type=USER_ROLE_CHANGE msg=audit(1345796078.588:119365): user pid=10618 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1345796078.591:119366): user pid=10618 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1345796078.593:119367): user pid=10618 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1345796078.593:119368): user pid=10618 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345796078.594:119369): user pid=10629 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=10629 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345796078.594:119370): user pid=10629 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=10629 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRED_REFR msg=audit(1345796078.594:119371): user pid=10629 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1345796078.640:119372): user pid=10618 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1345796078.640:119373): user pid=10618 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1345796078.640:119374): user pid=10618 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1345796078.640:119375): user pid=10618 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345796078.640:119376): user pid=10618 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=10618 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345796078.640:119377): user pid=10618 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=10618 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345796078.641:119378): user pid=10618 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10618 suid=0 rport=35002 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_ACCT msg=audit(1345796401.387:119379): user pid=10995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345796401.387:119380): user pid=10995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345796401.392:119381): pid=10995 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=40 >type=USER_START msg=audit(1345796401.399:119382): user pid=10995 uid=0 auid=0 ses=40 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345796401.445:119383): user pid=10995 uid=0 auid=0 ses=40 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345796401.446:119384): user pid=10995 uid=0 auid=0 ses=40 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345797001.463:119385): user pid=11678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345797001.463:119386): user pid=11678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345797001.464:119387): pid=11678 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=41 >type=USER_START msg=audit(1345797001.472:119388): user pid=11678 uid=0 auid=0 ses=41 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345797001.538:119389): user pid=11678 uid=0 auid=0 ses=41 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345797001.538:119390): user pid=11678 uid=0 auid=0 ses=41 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345797601.545:119391): user pid=12341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345797601.545:119392): user pid=12341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345797601.546:119393): pid=12341 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=42 >type=USER_START msg=audit(1345797601.557:119394): user pid=12341 uid=0 auid=0 ses=42 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345797601.596:119395): user pid=12341 uid=0 auid=0 ses=42 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345797601.596:119396): user pid=12341 uid=0 auid=0 ses=42 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=VIRT_MACHINE_ID msg=audit(1345798125.310:119397): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-ctx=? img-ctx=? model=stack exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345798125.310:119398): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345798125.310:119399): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-ctx=system_u:system_r:svirt_t:s0:c447,c791 img-ctx=system_u:object_r:svirt_image_t:s0:c447,c791 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345798125.439:119400): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345798125.439:119401): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345798125.439:119402): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345798125.439:119403): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345798125.439:119404): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345798125.440:119405): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345798125.440:119406): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345798125.440:119407): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345798125.440:119408): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345798125.440:119409): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1345798125.440:119410): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345798125.440:119411): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1345798125.471:119412): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1345798125.471:119412): arch=c000003e syscall=16 success=yes exit=0 a0=1a a1=89a2 a2=7f58f7d6cbd0 a3=7f58f7d6c930 items=0 ppid=1 pid=8015 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1345798125.472:119413): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c net=52:54:00:1E:F2:53 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345798125.473:119414): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345798126.265:119415): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-disk="?" new-disk="/var/lib/libvirt/images/testkf10.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345798126.265:119416): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345798126.265:119417): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345798126.265:119418): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-vcpu=0 new-vcpu=2 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1345798126.265:119419): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-pid=12948 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1345798201.673:119420): user pid=13181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345798201.673:119421): user pid=13181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345798201.678:119422): pid=13181 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=43 >type=USER_START msg=audit(1345798201.687:119423): user pid=13181 uid=0 auid=0 ses=43 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345798201.829:119424): user pid=13181 uid=0 auid=0 ses=43 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345798201.830:119425): user pid=13181 uid=0 auid=0 ses=43 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRYPTO_KEY_USER msg=audit(1345798297.203:119426): user pid=13306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=13306 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.20 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345798297.203:119427): user pid=13306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=13306 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.20 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345798297.205:119428): user pid=13305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=13306 suid=74 rport=57364 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.20 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345798297.205:119429): user pid=13305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=13306 suid=74 rport=57364 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.20 terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1345798307.536:119430): dev=vnet0 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=SYSCALL msg=audit(1345798307.536:119430): arch=c000003e syscall=3 success=yes exit=0 a0=19 a1=7fffa4502a40 a2=8 a3=1 items=0 ppid=1 pid=12948 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=system_u:system_r:svirt_t:s0:c447,c791 key=(null) >type=VIRT_CONTROL msg=audit(1345798308.041:119431): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345798391.801:119432): user pid=13435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=13435 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345798391.801:119433): user pid=13435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=13435 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345798391.802:119434): user pid=13434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=13435 suid=74 rport=47810 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345798391.802:119435): user pid=13434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=13435 suid=74 rport=47810 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1345798396.946:119436): user pid=13434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1345798410.843:119437): user pid=13434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1345798410.846:119438): user pid=13434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345798410.846:119439): user pid=13434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13435 suid=74 rport=47810 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1345798410.847:119440): user pid=13434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1345798410.847:119441): user pid=13434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1345798410.847:119442): pid=13434 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=44 >type=USER_ROLE_CHANGE msg=audit(1345798410.919:119443): user pid=13434 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1345798410.931:119444): user pid=13434 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1345798410.960:119445): user pid=13457 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=/dev/pts/1 res=success' >type=USER_START msg=audit(1345798410.960:119446): user pid=13457 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=/dev/pts/1 res=success' >type=CRYPTO_KEY_USER msg=audit(1345798410.960:119447): user pid=13457 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=13457 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=pts/1 res=success' >type=CRYPTO_KEY_USER msg=audit(1345798410.961:119448): user pid=13457 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=13457 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=pts/1 res=success' >type=CRED_REFR msg=audit(1345798410.961:119449): user pid=13457 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=VIRT_MACHINE_ID msg=audit(1345798436.419:119450): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-ctx=? img-ctx=? model=? exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345798436.419:119451): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-ctx=? img-ctx=? model=stack exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345798436.419:119452): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345798436.419:119453): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-ctx=system_u:system_r:svirt_t:s0:c75,c158 img-ctx=system_u:object_r:svirt_image_t:s0:c75,c158 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345798436.520:119454): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345798436.521:119455): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345798436.521:119456): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345798436.521:119457): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345798436.521:119458): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345798436.521:119459): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345798436.521:119460): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345798436.521:119461): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345798436.522:119462): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345798436.522:119463): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1345798436.522:119464): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345798436.522:119465): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1345798436.535:119466): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1345798436.535:119466): arch=c000003e syscall=16 success=yes exit=0 a0=1d a1=89a2 a2=7f58f876dbd0 a3=203a2032373a6573 items=0 ppid=1 pid=8014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1345798436.536:119467): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c net=52:54:00:1E:F2:53 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345798436.536:119468): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345798436.977:119469): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-disk="?" new-disk="/var/lib/libvirt/images/testkf10.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345798436.977:119470): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345798436.977:119471): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345798436.977:119472): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-vcpu=0 new-vcpu=2 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1345798436.977:119473): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-pid=13529 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1345798549.893:119474): dev=vnet0 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=SYSCALL msg=audit(1345798549.893:119474): arch=c000003e syscall=3 success=yes exit=0 a0=1c a1=7fffd59d3c60 a2=8 a3=1 items=0 ppid=1 pid=13529 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=system_u:system_r:svirt_t:s0:c75,c158 key=(null) >type=VIRT_CONTROL msg=audit(1345798550.396:119475): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1345798801.857:119476): user pid=14440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345798801.857:119477): user pid=14440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345798801.859:119478): pid=14440 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=45 >type=USER_START msg=audit(1345798801.869:119479): user pid=14440 uid=0 auid=0 ses=45 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345798801.969:119480): user pid=14440 uid=0 auid=0 ses=45 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345798801.969:119481): user pid=14440 uid=0 auid=0 ses=45 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345798861.974:119482): user pid=14570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345798861.974:119483): user pid=14570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345798861.979:119484): pid=14570 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=46 >type=USER_START msg=audit(1345798861.985:119485): user pid=14570 uid=0 auid=0 ses=46 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345798862.038:119486): user pid=14570 uid=0 auid=0 ses=46 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345798862.039:119487): user pid=14570 uid=0 auid=0 ses=46 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345799401.045:119488): user pid=15712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345799401.046:119489): user pid=15712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345799401.046:119490): pid=15712 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=47 >type=USER_START msg=audit(1345799401.055:119491): user pid=15712 uid=0 auid=0 ses=47 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345799401.093:119492): user pid=15712 uid=0 auid=0 ses=47 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345799401.093:119493): user pid=15712 uid=0 auid=0 ses=47 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=VIRT_MACHINE_ID msg=audit(1345799822.010:119494): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c vm-ctx=? img-ctx=? model=stack exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345799822.010:119495): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345799822.010:119496): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c vm-ctx=system_u:system_r:svirt_t:s0:c56,c234 img-ctx=system_u:object_r:svirt_image_t:s0:c56,c234 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345799822.127:119497): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345799822.135:119498): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345799822.135:119499): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345799822.135:119500): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345799822.136:119501): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345799822.136:119502): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345799822.136:119503): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345799822.136:119504): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345799822.136:119505): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345799822.136:119506): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1345799822.136:119507): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345799822.137:119508): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1345799822.159:119509): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1345799822.159:119509): arch=c000003e syscall=16 success=yes exit=0 a0=20 a1=89a2 a2=7f58f7d6cbd0 a3=203a2032373a6573 items=0 ppid=1 pid=8015 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1345799822.160:119510): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c net=52:54:00:1E:F2:53 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345799822.160:119511): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345799822.621:119512): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c old-disk="?" new-disk="/var/lib/libvirt/images/testkf11.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345799822.621:119513): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345799822.621:119514): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345799822.621:119515): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c old-vcpu=0 new-vcpu=2 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1345799822.621:119516): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c vm-pid=16633 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1345799839.544:119517): dev=vnet0 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=SYSCALL msg=audit(1345799839.544:119517): arch=c000003e syscall=3 success=yes exit=0 a0=1f a1=7fff2e5fa370 a2=8 a3=1 items=0 ppid=1 pid=16633 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=system_u:system_r:svirt_t:s0:c56,c234 key=(null) >type=VIRT_CONTROL msg=audit(1345799840.019:119518): user pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=SYSTEM_RUNLEVEL msg=audit(1345799842.259:119519): user pid=16758 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:shutdown_t:s0-s0:c0.c1023 msg='old-level=3 new-level=6 exe="/sbin/shutdown" hostname=? addr=? terminal=pts/1 res=success' >type=SYSTEM_SHUTDOWN msg=audit(1345799842.259:119520): user pid=16758 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:shutdown_t:s0-s0:c0.c1023 msg='init exe="/sbin/shutdown" hostname=? addr=? terminal=pts/1 res=success' >type=CRYPTO_KEY_USER msg=audit(1345799844.543:119521): user pid=7198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=7198 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345799844.543:119522): user pid=7198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=7198 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1345799844.649:119523): user pid=9966 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.20 addr=10.66.5.20 terminal=ssh res=success' >type=CRED_DISP msg=audit(1345799844.649:119524): user pid=9966 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.20 addr=10.66.5.20 terminal=ssh res=success' >type=USER_END msg=audit(1345799844.650:119525): user pid=13434 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1345799844.650:119526): user pid=13434 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1345799844.650:119527): user pid=9966 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1345799844.650:119528): user pid=9966 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1345799844.651:119529): user pid=13434 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=USER_LOGOUT msg=audit(1345799844.651:119530): user pid=13434 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=CRYPTO_KEY_USER msg=audit(1345799844.651:119531): user pid=13434 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=13434 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345799844.651:119532): user pid=9966 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=9966 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.20 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345799844.651:119533): user pid=13434 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=13434 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345799844.651:119534): user pid=9966 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=9966 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.20 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345799844.651:119535): user pid=13434 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13434 suid=0 rport=47810 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345799844.651:119536): user pid=9966 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9966 suid=0 rport=56703 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.20 terminal=? res=success' >type=DAEMON_END msg=audit(1345799845.830:9075): auditd normal halt, sending auid=0 pid=16959 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1345799929.667:4014): auditd start, ver=2.2 format=raw kernel=2.6.32-298.el6.x86_64 auid=4294967295 pid=1474 subj=system_u:system_r:auditd_t:s0 res=success >type=CONFIG_CHANGE msg=audit(1345799929.794:4): audit_backlog_limit=320 old=64 auid=4294967295 ses=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=ANOM_PROMISCUOUS msg=audit(1345799933.005:5): dev=virbr0-nic prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1345799933.005:5): arch=c000003e syscall=16 success=yes exit=0 a0=6 a1=89a2 a2=7f67b9dc4aa0 a3=7f67b9dc4800 items=0 ppid=1 pid=2002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345799933.060:6): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1345799933.060:6): arch=c000003e syscall=175 success=yes exit=0 a0=24362b0 a1=22a0 a2=242e4e0 a3=7fff262efbc0 items=0 ppid=2095 pid=2096 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1345799933.062:7): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1345799933.062:7): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=25257f0 items=0 ppid=1991 pid=2053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345799933.066:8): table=filter family=2 entries=5 >type=SYSCALL msg=audit(1345799933.066:8): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=136d7f0 items=0 ppid=1991 pid=2097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345799933.072:9): table=mangle family=2 entries=0 >type=SYSCALL msg=audit(1345799933.072:9): arch=c000003e syscall=175 success=yes exit=0 a0=1f692b0 a1=22d0 a2=1f614e0 a3=7fff134f8b80 items=0 ppid=2099 pid=2100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1345799933.075:10): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1345799933.075:10): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=241f290 items=0 ppid=1991 pid=2098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345799933.093:11): table=filter family=2 entries=6 >type=SYSCALL msg=audit(1345799933.093:11): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=2126e50 items=0 ppid=1991 pid=2103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345799933.095:12): table=filter family=2 entries=7 >type=SYSCALL msg=audit(1345799933.095:12): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=e97fc0 items=0 ppid=1991 pid=2104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345799933.097:13): table=filter family=2 entries=8 >type=SYSCALL msg=audit(1345799933.097:13): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=24e0920 items=0 ppid=1991 pid=2105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345799933.228:14): table=filter family=2 entries=9 >type=SYSCALL msg=audit(1345799933.228:14): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=ac0a90 items=0 ppid=1991 pid=2108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345799933.230:15): table=filter family=2 entries=10 >type=SYSCALL msg=audit(1345799933.230:15): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1fa27d0 items=0 ppid=1991 pid=2109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345799933.233:16): table=filter family=2 entries=11 >type=SYSCALL msg=audit(1345799933.233:16): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1716940 items=0 ppid=1991 pid=2110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345799933.235:17): table=filter family=2 entries=12 >type=SYSCALL msg=audit(1345799933.235:17): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=d9f550 items=0 ppid=1991 pid=2111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345799933.564:18): table=nat family=2 entries=0 >type=SYSCALL msg=audit(1345799933.564:18): arch=c000003e syscall=175 success=yes exit=0 a0=191cd80 a1=3ef0 a2=190c4e0 a3=7ffff7e65220 items=0 ppid=2117 pid=2118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1345799933.567:19): table=nat family=2 entries=4 >type=SYSCALL msg=audit(1345799933.567:19): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=25be620 items=0 ppid=1991 pid=2116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345799933.645:20): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1345799933.645:20): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=99a800 items=0 ppid=1991 pid=2121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345799933.647:21): table=nat family=2 entries=6 >type=SYSCALL msg=audit(1345799933.647:21): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=8e8700 items=0 ppid=1991 pid=2122 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345799934.187:22): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1345799934.187:22): arch=c000003e syscall=175 success=yes exit=0 a0=8cc2b0 a1=22c8 a2=8c44e0 a3=7fff11b740d0 items=0 ppid=2140 pid=2141 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1345799934.626:23): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1345799934.626:23): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1345799934.626:23): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1345799934.626:23): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1345799934.626:23): arch=c000003e syscall=56 success=yes exit=2179 a0=6c020011 a1=7f67b419bce0 a2=8 a3=a7373 items=0 ppid=1 pid=2002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=SYSCALL msg=audit(1345799934.626:24): arch=c000003e syscall=56 success=yes exit=0 a0=6c020011 a1=7f67b419bce0 a2=8 a3=a7373 items=0 ppid=2002 pid=2179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=FD_PAIR msg=audit(1345799934.626:24): fd0=0 fd1=0 >type=CRYPTO_KEY_USER msg=audit(1345799945.636:25): user pid=2471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=2471 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345799945.636:26): user pid=2471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=2471 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345799945.638:27): user pid=2470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=2471 suid=74 rport=48024 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345799945.638:28): user pid=2470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=2471 suid=74 rport=48024 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1345799950.964:29): user pid=2470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1345799953.614:30): user pid=2470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1345799953.617:31): user pid=2470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345799953.618:32): user pid=2470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2471 suid=74 rport=48024 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1345799953.619:33): user pid=2470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1345799953.619:34): user pid=2470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1345799953.619:35): pid=2470 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1 >type=USER_ROLE_CHANGE msg=audit(1345799953.718:36): user pid=2470 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1345799953.721:37): user pid=2470 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1345799953.758:38): user pid=2497 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=/dev/pts/1 res=success' >type=USER_START msg=audit(1345799953.758:39): user pid=2497 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=/dev/pts/1 res=success' >type=CRYPTO_KEY_USER msg=audit(1345799953.759:40): user pid=2497 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=2497 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=pts/1 res=success' >type=CRYPTO_KEY_USER msg=audit(1345799953.759:41): user pid=2497 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=2497 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=pts/1 res=success' >type=CRED_REFR msg=audit(1345799953.759:42): user pid=2497 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=MAC_POLICY_LOAD msg=audit(1345799959.635:43): policy loaded auid=4294967295 ses=4294967295 >type=SYSCALL msg=audit(1345799959.635:43): arch=c000003e syscall=1 success=yes exit=6602259 a0=4 a1=7f6338ea4000 a2=64be13 a3=7fffacc86b40 items=0 ppid=2182 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="load_policy" exe="/sbin/load_policy" subj=system_u:system_r:initrc_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1345799961.420:44): table=nat family=2 entries=7 >type=SYSCALL msg=audit(1345799961.420:44): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=985ac0 items=0 ppid=2529 pid=2550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1345799961.423:45): table=nat family=2 entries=4 >type=SYSCALL msg=audit(1345799961.423:45): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=8b5600 items=0 ppid=2529 pid=2552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1345799961.424:46): table=mangle family=2 entries=7 >type=SYSCALL msg=audit(1345799961.424:46): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1cd0910 items=0 ppid=2529 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1345799961.425:47): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1345799961.425:47): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=108b850 items=0 ppid=2529 pid=2556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1345799961.426:48): table=filter family=2 entries=13 >type=SYSCALL msg=audit(1345799961.426:48): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1f15ff0 items=0 ppid=2529 pid=2557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1345799961.428:49): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1345799961.428:49): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=10d5600 items=0 ppid=2529 pid=2559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1345799961.431:50): table=nat family=2 entries=4 >type=SYSCALL msg=audit(1345799961.431:50): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=2320600 items=0 ppid=2529 pid=2562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1345799961.432:51): table=nat family=2 entries=4 >type=SYSCALL msg=audit(1345799961.432:51): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1dba600 items=0 ppid=2529 pid=2563 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1345799961.433:52): table=nat family=2 entries=4 >type=SYSCALL msg=audit(1345799961.433:52): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=98e600 items=0 ppid=2529 pid=2564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1345799961.434:53): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1345799961.434:53): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=20bd850 items=0 ppid=2529 pid=2565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1345799961.436:54): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1345799961.436:54): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=a30850 items=0 ppid=2529 pid=2566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1345799961.437:55): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1345799961.437:55): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1bb9850 items=0 ppid=2529 pid=2567 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1345799961.437:56): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1345799961.437:56): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1245850 items=0 ppid=2529 pid=2568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1345799961.438:57): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1345799961.438:57): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1638850 items=0 ppid=2529 pid=2569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1345799961.439:58): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1345799961.439:58): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=253c600 items=0 ppid=2529 pid=2570 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1345799961.440:59): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1345799961.440:59): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=2716600 items=0 ppid=2529 pid=2571 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1345799961.441:60): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1345799961.441:60): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=23ec600 items=0 ppid=2529 pid=2572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1345799961.850:61): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1345799961.850:61): arch=c000003e syscall=175 success=yes exit=0 a0=13252b0 a1=22a0 a2=131d4e0 a3=7fff5de8b0d0 items=0 ppid=2640 pid=2641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1345799961.853:62): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1345799961.853:62): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1fbc600 items=0 ppid=2041 pid=2638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1345799962.087:63): table=nat family=2 entries=0 >type=SYSCALL msg=audit(1345799962.087:63): arch=c000003e syscall=175 success=yes exit=0 a0=1781dd0 a1=3ef0 a2=175e4e0 a3=7ffff4527d20 items=0 ppid=2680 pid=2681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1345799962.123:64): table=mangle family=2 entries=0 >type=SYSCALL msg=audit(1345799962.123:64): arch=c000003e syscall=175 success=yes exit=0 a0=ee22b0 a1=22d0 a2=eda4e0 a3=7fff7a5ad2f0 items=0 ppid=2705 pid=2707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1345799962.135:65): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1345799962.135:65): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=184c7f0 items=0 ppid=2663 pid=2711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345799962.139:66): table=filter family=2 entries=5 >type=SYSCALL msg=audit(1345799962.139:66): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=16617f0 items=0 ppid=2663 pid=2713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345799962.142:67): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1345799962.142:67): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1252290 items=0 ppid=2663 pid=2714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345799962.145:68): table=filter family=2 entries=6 >type=SYSCALL msg=audit(1345799962.145:68): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=20a1e50 items=0 ppid=2663 pid=2716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345799962.147:69): table=filter family=2 entries=7 >type=SYSCALL msg=audit(1345799962.147:69): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=24effc0 items=0 ppid=2663 pid=2717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345799962.149:70): table=filter family=2 entries=8 >type=SYSCALL msg=audit(1345799962.149:70): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=11d1920 items=0 ppid=2663 pid=2718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345799962.151:71): table=filter family=2 entries=9 >type=SYSCALL msg=audit(1345799962.151:71): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=171ea90 items=0 ppid=2663 pid=2719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345799962.153:72): table=filter family=2 entries=10 >type=SYSCALL msg=audit(1345799962.153:72): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=18547d0 items=0 ppid=2663 pid=2720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345799962.155:73): table=filter family=2 entries=11 >type=SYSCALL msg=audit(1345799962.155:73): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=14ce940 items=0 ppid=2663 pid=2721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345799962.158:74): table=filter family=2 entries=12 >type=SYSCALL msg=audit(1345799962.158:74): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=9d9550 items=0 ppid=2663 pid=2722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345799962.164:75): table=nat family=2 entries=4 >type=SYSCALL msg=audit(1345799962.164:75): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=16fc620 items=0 ppid=2663 pid=2725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345799962.169:76): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1345799962.169:76): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=18ac800 items=0 ppid=2663 pid=2728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345799962.171:77): table=nat family=2 entries=6 >type=SYSCALL msg=audit(1345799962.171:77): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1214700 items=0 ppid=2663 pid=2729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345799962.652:78): table=filter family=10 entries=0 >type=NETFILTER_CFG msg=audit(1345799962.652:78): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1345799962.652:78): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1345799962.652:78): table=mangle family=2 entries=0 >type=SYSCALL msg=audit(1345799962.652:78): arch=c000003e syscall=56 success=yes exit=2776 a0=6c020011 a1=7ff920171120 a2=8 a3=a7373 items=0 ppid=1 pid=2674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=SYSCALL msg=audit(1345799962.652:79): arch=c000003e syscall=56 success=yes exit=0 a0=6c020011 a1=7ff920171120 a2=8 a3=a7373 items=0 ppid=2674 pid=2776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=FD_PAIR msg=audit(1345799962.652:79): fd0=0 fd1=0 >type=USER_ACCT msg=audit(1345800001.541:80): user pid=2788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345800001.541:81): user pid=2788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345800001.548:82): pid=2788 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2 >type=USER_START msg=audit(1345800001.562:83): user pid=2788 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345800001.653:84): user pid=2788 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345800001.653:85): user pid=2788 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=VIRT_MACHINE_ID msg=audit(1345800012.264:86): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-ctx=? img-ctx=? model=stack exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345800012.264:87): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345800012.264:88): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-ctx=system_u:system_r:svirt_t:s0:c149,c821 img-ctx=system_u:object_r:svirt_image_t:s0:c149,c821 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800012.383:89): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800012.384:90): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800012.384:91): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800012.384:92): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800012.384:93): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800012.385:94): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800012.385:95): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800012.385:96): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800012.385:97): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800012.385:98): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1345800012.385:99): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800012.385:100): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1345800012.402:101): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1345800012.402:101): arch=c000003e syscall=16 success=yes exit=0 a0=17 a1=89a2 a2=7ff92de80bd0 a3=7ff92de80930 items=0 ppid=1 pid=2666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1345800012.403:102): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c net=52:54:00:1E:F2:53 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800012.403:103): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800012.936:104): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-disk="?" new-disk="/var/lib/libvirt/images/testkf10.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800012.936:105): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800012.936:106): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800012.936:107): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-vcpu=0 new-vcpu=2 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1345800012.936:108): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-pid=2810 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1345800124.428:109): dev=vnet0 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=SYSCALL msg=audit(1345800124.428:109): arch=c000003e syscall=3 success=yes exit=0 a0=16 a1=7fffd3e0c360 a2=8 a3=1 items=0 ppid=1 pid=2810 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=system_u:system_r:svirt_t:s0:c149,c821 key=(null) >type=VIRT_CONTROL msg=audit(1345800124.873:110): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345800156.217:111): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-ctx=? img-ctx=? model=stack exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345800156.218:112): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345800156.218:113): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-ctx=system_u:system_r:svirt_t:s0:c237,c657 img-ctx=system_u:object_r:svirt_image_t:s0:c237,c657 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800156.310:114): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800156.310:115): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800156.310:116): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800156.310:117): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800156.310:118): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800156.310:119): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800156.311:120): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800156.311:121): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800156.311:122): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800156.311:123): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1345800156.311:124): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800156.311:125): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1345800156.329:126): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1345800156.329:126): arch=c000003e syscall=16 success=yes exit=0 a0=1a a1=89a2 a2=7ff92d47fbd0 a3=203a2032373a6573 items=0 ppid=1 pid=2667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1345800156.329:127): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c net=52:54:00:1E:F2:53 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800156.329:128): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800156.767:129): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-disk="?" new-disk="/var/lib/libvirt/images/testkf10.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800156.767:130): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800156.767:131): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-mem=0 new-mem=524288 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800156.767:132): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-vcpu=0 new-vcpu=2 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1345800156.767:133): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-pid=3035 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345800209.274:134): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345800209.274:135): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c vm-ctx=system_u:system_r:svirt_t:s0:c175,c197 img-ctx=system_u:object_r:svirt_image_t:s0:c175,c197 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800209.381:136): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800209.381:137): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800209.381:138): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800209.381:139): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800209.381:140): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800209.381:141): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800209.381:142): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800209.381:143): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800209.381:144): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800209.381:145): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1345800209.382:146): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800209.382:147): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1345800209.384:148): dev=vnet1 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1345800209.384:148): arch=c000003e syscall=16 success=yes exit=0 a0=1b a1=89a2 a2=7ff92e881bd0 a3=203a2032373a6573 items=0 ppid=1 pid=2665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1345800209.384:149): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c net=52:54:00:1E:F2:53 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800209.384:150): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800209.857:151): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c old-disk="?" new-disk="/var/lib/libvirt/images/testkf11.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800209.857:152): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800209.857:153): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800209.857:154): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c old-vcpu=0 new-vcpu=2 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1345800209.857:155): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c vm-pid=3202 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=SYSTEM_RUNLEVEL msg=audit(1345800311.053:156): user pid=3431 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:shutdown_t:s0-s0:c0.c1023 msg='old-level=3 new-level=6 exe="/sbin/shutdown" hostname=? addr=? terminal=pts/1 res=success' >type=SYSTEM_SHUTDOWN msg=audit(1345800311.053:157): user pid=3431 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:shutdown_t:s0-s0:c0.c1023 msg='init exe="/sbin/shutdown" hostname=? addr=? terminal=pts/1 res=success' >type=ANOM_PROMISCUOUS msg=audit(1345800314.176:158): dev=vnet0 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=SYSCALL msg=audit(1345800314.176:158): arch=c000003e syscall=3 success=yes exit=0 a0=19 a1=7fffcf9dbe10 a2=8 a3=7fffcf9dbc00 items=0 ppid=1 pid=3035 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=system_u:system_r:svirt_t:s0:c237,c657 key=(null) >type=VIRT_CONTROL msg=audit(1345800314.598:159): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=saved vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1345800320.571:160): dev=vnet1 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=SYSCALL msg=audit(1345800320.571:160): arch=c000003e syscall=3 success=yes exit=0 a0=19 a1=7fff9f6bfd00 a2=8 a3=7fff9f6bfaf0 items=0 ppid=1 pid=3202 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=system_u:system_r:svirt_t:s0:c175,c197 key=(null) >type=VIRT_CONTROL msg=audit(1345800320.992:161): user pid=2663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=saved vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345800322.507:162): user pid=1819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=1819 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345800322.507:163): user pid=1819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=1819 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1345800322.612:164): user pid=2470 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1345800322.612:165): user pid=2470 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1345800322.613:166): user pid=2470 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=USER_LOGOUT msg=audit(1345800322.614:167): user pid=2470 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=CRYPTO_KEY_USER msg=audit(1345800322.614:168): user pid=2470 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=2470 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345800322.614:169): user pid=2470 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=2470 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345800322.614:170): user pid=2470 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2470 suid=0 rport=48024 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=DAEMON_END msg=audit(1345800323.107:4015): auditd normal halt, sending auid=0 pid=3705 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1345800403.676:2517): auditd start, ver=2.2 format=raw kernel=2.6.32-298.el6.x86_64 auid=4294967295 pid=1456 subj=system_u:system_r:auditd_t:s0 res=success >type=CONFIG_CHANGE msg=audit(1345800403.804:4): audit_backlog_limit=320 old=64 auid=4294967295 ses=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=ANOM_PROMISCUOUS msg=audit(1345800407.007:5): dev=virbr0-nic prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1345800407.007:5): arch=c000003e syscall=16 success=yes exit=0 a0=f a1=89a2 a2=7f0d85164aa0 a3=7f0d85164800 items=0 ppid=1 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800407.113:6): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1345800407.113:6): arch=c000003e syscall=175 success=yes exit=0 a0=1f3d2b0 a1=22a0 a2=1f354e0 a3=7fffa6af74f0 items=0 ppid=2073 pid=2074 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1345800407.115:7): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1345800407.115:7): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=82b7f0 items=0 ppid=1973 pid=2034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800407.120:8): table=filter family=2 entries=5 >type=SYSCALL msg=audit(1345800407.120:8): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1e3f7f0 items=0 ppid=1973 pid=2075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800407.178:9): table=mangle family=2 entries=0 >type=SYSCALL msg=audit(1345800407.178:9): arch=c000003e syscall=175 success=yes exit=0 a0=1d002b0 a1=22d0 a2=1cf84e0 a3=7fffe1dec1a0 items=0 ppid=2077 pid=2078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1345800407.180:10): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1345800407.180:10): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=d4d290 items=0 ppid=1973 pid=2076 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800407.211:11): table=filter family=2 entries=6 >type=SYSCALL msg=audit(1345800407.211:11): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=15f8e50 items=0 ppid=1973 pid=2081 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800407.213:12): table=filter family=2 entries=7 >type=SYSCALL msg=audit(1345800407.213:12): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=9f0fc0 items=0 ppid=1973 pid=2082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800407.216:13): table=filter family=2 entries=8 >type=SYSCALL msg=audit(1345800407.216:13): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=2421920 items=0 ppid=1973 pid=2083 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800407.276:14): table=filter family=2 entries=9 >type=SYSCALL msg=audit(1345800407.276:14): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=14bca90 items=0 ppid=1973 pid=2086 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800407.278:15): table=filter family=2 entries=10 >type=SYSCALL msg=audit(1345800407.278:15): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=e347d0 items=0 ppid=1973 pid=2087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800407.280:16): table=filter family=2 entries=11 >type=SYSCALL msg=audit(1345800407.280:16): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1ca2940 items=0 ppid=1973 pid=2088 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800407.282:17): table=filter family=2 entries=12 >type=SYSCALL msg=audit(1345800407.282:17): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=960550 items=0 ppid=1973 pid=2089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800407.570:18): table=nat family=2 entries=0 >type=SYSCALL msg=audit(1345800407.570:18): arch=c000003e syscall=175 success=yes exit=0 a0=17bdd80 a1=3ef0 a2=17ad4e0 a3=7fff9b7ed300 items=0 ppid=2095 pid=2096 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1345800407.573:19): table=nat family=2 entries=4 >type=SYSCALL msg=audit(1345800407.573:19): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1659620 items=0 ppid=1973 pid=2094 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800407.638:20): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1345800407.638:20): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1a61800 items=0 ppid=1973 pid=2099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800407.641:21): table=nat family=2 entries=6 >type=SYSCALL msg=audit(1345800407.641:21): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=2285700 items=0 ppid=1973 pid=2100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800408.069:22): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1345800408.069:22): arch=c000003e syscall=175 success=yes exit=0 a0=13dc2b0 a1=22c8 a2=13d44e0 a3=7fffb4feddd0 items=0 ppid=2118 pid=2119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1345800408.578:23): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1345800408.578:23): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1345800408.578:23): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1345800408.578:23): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1345800408.578:23): arch=c000003e syscall=56 success=yes exit=2157 a0=6c020011 a1=7f0d80179fd0 a2=8 a3=a7373 items=0 ppid=1 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=SYSCALL msg=audit(1345800408.578:24): arch=c000003e syscall=56 success=yes exit=0 a0=6c020011 a1=7f0d80179fd0 a2=8 a3=a7373 items=0 ppid=1984 pid=2157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=FD_PAIR msg=audit(1345800408.578:24): fd0=0 fd1=0 >type=VIRT_MACHINE_ID msg=audit(1345800408.771:25): user pid=1973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345800408.771:26): user pid=1973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-ctx=system_u:system_r:svirt_t:s0:c264,c517 img-ctx=system_u:object_r:svirt_image_t:s0:c264,c517 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800408.895:27): user pid=1973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800408.895:28): user pid=1973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800408.896:29): user pid=1973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800408.896:30): user pid=1973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800408.896:31): user pid=1973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800408.896:32): user pid=1973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800408.896:33): user pid=1973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800408.896:34): user pid=1973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800408.896:35): user pid=1973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800408.896:36): user pid=1973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1345800408.896:37): user pid=1973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800408.897:38): user pid=1973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800408.981:39): user pid=1973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-disk="?" new-disk="/var/lib/libvirt/images/testkf10.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800408.981:40): user pid=1973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800408.981:41): user pid=1973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-mem=0 new-mem=524288 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800408.981:42): user pid=1973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-vcpu=0 new-vcpu=2 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1345800408.981:43): user pid=1973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=restored vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_MACHINE_ID msg=audit(1345800409.163:44): user pid=1973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345800409.163:45): user pid=1973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c vm-ctx=system_u:system_r:svirt_t:s0:c582,c991 img-ctx=system_u:object_r:svirt_image_t:s0:c582,c991 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800409.281:46): user pid=1973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800409.282:47): user pid=1973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800409.282:48): user pid=1973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800409.282:49): user pid=1973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800409.282:50): user pid=1973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800409.282:51): user pid=1973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800409.282:52): user pid=1973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800409.282:53): user pid=1973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800409.282:54): user pid=1973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800409.282:55): user pid=1973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1345800409.282:56): user pid=1973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800409.282:57): user pid=1973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1345800409.299:58): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1345800409.299:58): arch=c000003e syscall=16 success=yes exit=0 a0=18 a1=89a2 a2=7f0d8c19cb40 a3=203a2032373a6573 items=0 ppid=1 pid=1974 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1345800409.300:59): user pid=1973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c net=52:54:00:1E:F2:53 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800409.300:60): user pid=1973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800415.306:61): user pid=1973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c old-disk="?" new-disk="/var/lib/libvirt/images/testkf11.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800415.306:62): user pid=1973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800415.306:63): user pid=1973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800415.306:64): user pid=1973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c old-vcpu=0 new-vcpu=2 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1345800415.306:65): user pid=1973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=restored vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c vm-pid=2199 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=MAC_POLICY_LOAD msg=audit(1345800443.489:66): policy loaded auid=4294967295 ses=4294967295 >type=SYSCALL msg=audit(1345800443.489:66): arch=c000003e syscall=1 success=yes exit=6602259 a0=4 a1=7f590ff0b000 a2=64be13 a3=7fffc1e3b400 items=0 ppid=2457 pid=2538 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="load_policy" exe="/sbin/load_policy" subj=system_u:system_r:initrc_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1345800444.910:67): table=nat family=2 entries=7 >type=SYSCALL msg=audit(1345800444.910:67): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=22e8ac0 items=0 ppid=2549 pid=2570 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1345800444.912:68): table=nat family=2 entries=4 >type=SYSCALL msg=audit(1345800444.912:68): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=26d6600 items=0 ppid=2549 pid=2572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1345800444.913:69): table=mangle family=2 entries=7 >type=SYSCALL msg=audit(1345800444.913:69): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=2371910 items=0 ppid=2549 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1345800444.915:70): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1345800444.915:70): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=25a1850 items=0 ppid=2549 pid=2575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1345800444.916:71): table=filter family=2 entries=13 >type=SYSCALL msg=audit(1345800444.916:71): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=10d9ff0 items=0 ppid=2549 pid=2576 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1345800444.918:72): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1345800444.918:72): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=2768600 items=0 ppid=2549 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1345800444.921:73): table=nat family=2 entries=4 >type=SYSCALL msg=audit(1345800444.921:73): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=27fa600 items=0 ppid=2549 pid=2582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1345800444.922:74): table=nat family=2 entries=4 >type=SYSCALL msg=audit(1345800444.922:74): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=a81600 items=0 ppid=2549 pid=2583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1345800444.923:75): table=nat family=2 entries=4 >type=SYSCALL msg=audit(1345800444.923:75): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=16f3600 items=0 ppid=2549 pid=2584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1345800444.924:76): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1345800444.924:76): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1769850 items=0 ppid=2549 pid=2585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1345800444.925:77): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1345800444.925:77): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1986850 items=0 ppid=2549 pid=2586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1345800444.926:78): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1345800444.926:78): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=870850 items=0 ppid=2549 pid=2587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1345800444.927:79): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1345800444.927:79): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1268850 items=0 ppid=2549 pid=2588 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1345800444.928:80): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1345800444.928:80): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=129f850 items=0 ppid=2549 pid=2589 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1345800444.929:81): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1345800444.929:81): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=13a8600 items=0 ppid=2549 pid=2590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1345800444.930:82): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1345800444.930:82): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1eaa600 items=0 ppid=2549 pid=2591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1345800444.931:83): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1345800444.931:83): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1e9a600 items=0 ppid=2549 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1345800445.346:84): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1345800445.346:84): arch=c000003e syscall=175 success=yes exit=0 a0=16d02b0 a1=22a0 a2=16c84e0 a3=7fffa3524c00 items=0 ppid=2660 pid=2661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1345800445.348:85): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1345800445.348:85): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=186c600 items=0 ppid=2358 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1345800445.592:86): table=nat family=2 entries=0 >type=SYSCALL msg=audit(1345800445.592:86): arch=c000003e syscall=175 success=yes exit=0 a0=15b1dd0 a1=3ef0 a2=158e4e0 a3=7fff3cd8b630 items=0 ppid=2700 pid=2701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1345800445.625:87): table=mangle family=2 entries=0 >type=SYSCALL msg=audit(1345800445.625:87): arch=c000003e syscall=175 success=yes exit=0 a0=b6f2b0 a1=22d0 a2=b674e0 a3=7fff275b1760 items=0 ppid=2723 pid=2724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1345800445.636:88): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1345800445.636:88): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=e7e7f0 items=0 ppid=2683 pid=2731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800445.647:89): table=filter family=2 entries=5 >type=SYSCALL msg=audit(1345800445.647:89): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=140f7f0 items=0 ppid=2683 pid=2737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800445.650:90): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1345800445.650:90): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=2008290 items=0 ppid=2683 pid=2740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800445.652:91): table=filter family=2 entries=6 >type=SYSCALL msg=audit(1345800445.652:91): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=269ae50 items=0 ppid=2683 pid=2741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800445.654:92): table=filter family=2 entries=7 >type=SYSCALL msg=audit(1345800445.654:92): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=9f6fc0 items=0 ppid=2683 pid=2742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800445.657:93): table=filter family=2 entries=8 >type=SYSCALL msg=audit(1345800445.657:93): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=25ef920 items=0 ppid=2683 pid=2743 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800445.659:94): table=filter family=2 entries=9 >type=SYSCALL msg=audit(1345800445.659:94): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=2362a90 items=0 ppid=2683 pid=2744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800445.662:95): table=filter family=2 entries=10 >type=SYSCALL msg=audit(1345800445.662:95): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=85a7d0 items=0 ppid=2683 pid=2745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800445.664:96): table=filter family=2 entries=11 >type=SYSCALL msg=audit(1345800445.664:96): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=150d940 items=0 ppid=2683 pid=2746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800445.666:97): table=filter family=2 entries=12 >type=SYSCALL msg=audit(1345800445.666:97): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=202d550 items=0 ppid=2683 pid=2747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800445.672:98): table=nat family=2 entries=4 >type=SYSCALL msg=audit(1345800445.672:98): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=21a9620 items=0 ppid=2683 pid=2750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800445.678:99): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1345800445.678:99): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=27e7800 items=0 ppid=2683 pid=2753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800445.680:100): table=nat family=2 entries=6 >type=SYSCALL msg=audit(1345800445.680:100): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1abc700 items=0 ppid=2683 pid=2754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/iptables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800446.169:101): table=filter family=10 entries=0 >type=NETFILTER_CFG msg=audit(1345800446.169:101): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1345800446.169:101): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1345800446.169:101): table=mangle family=2 entries=0 >type=SYSCALL msg=audit(1345800446.169:101): arch=c000003e syscall=56 success=yes exit=2802 a0=6c020011 a1=7f5ca4191d90 a2=8 a3=a7373 items=0 ppid=1 pid=2694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=SYSCALL msg=audit(1345800446.169:102): arch=c000003e syscall=56 success=yes exit=0 a0=6c020011 a1=7f5ca4191d90 a2=8 a3=a7373 items=0 ppid=2694 pid=2802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=FD_PAIR msg=audit(1345800446.169:102): fd0=0 fd1=0 >type=CRYPTO_KEY_USER msg=audit(1345800449.074:103): user pid=2804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=2804 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345800449.074:104): user pid=2804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=2804 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345800449.076:105): user pid=2803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=2804 suid=74 rport=48070 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1345800449.076:106): user pid=2803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=2804 suid=74 rport=48070 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1345800454.724:107): user pid=2803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1345800457.165:108): user pid=2803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1345800457.168:109): user pid=2803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1345800457.168:110): user pid=2803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2804 suid=74 rport=48070 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1345800457.169:111): user pid=2803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1345800457.169:112): user pid=2803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1345800457.169:113): pid=2803 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1 >type=USER_ROLE_CHANGE msg=audit(1345800457.266:114): user pid=2803 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1345800457.269:115): user pid=2803 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1345800457.301:116): user pid=2807 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1345800457.302:117): user pid=2807 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1345800457.302:118): user pid=2807 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=2807 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1345800457.302:119): user pid=2807 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=2807 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1345800457.303:120): user pid=2807 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=VIRT_MACHINE_ID msg=audit(1345800469.243:121): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345800469.243:122): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-ctx=system_u:system_r:svirt_t:s0:c106,c542 img-ctx=system_u:object_r:svirt_image_t:s0:c106,c542 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800469.348:123): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800469.349:124): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800469.349:125): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800469.349:126): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800469.349:127): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800469.349:128): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800469.349:129): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800469.349:130): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800469.350:131): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800469.350:132): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1345800469.350:133): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800469.350:134): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800469.414:135): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-disk="?" new-disk="/var/lib/libvirt/images/testkf10.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800469.414:136): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800469.414:137): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-mem=0 new-mem=524288 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800469.414:138): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-vcpu=0 new-vcpu=2 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1345800469.414:139): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=restored vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=ANOM_PROMISCUOUS msg=audit(1345800475.604:140): dev=vnet0 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=SYSCALL msg=audit(1345800475.604:140): arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=7fff68111350 a2=8 a3=1 items=0 ppid=1 pid=2199 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=system_u:system_r:svirt_t:s0:c582,c991 key=(null) >type=VIRT_CONTROL msg=audit(1345800476.080:141): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345800479.747:142): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345800479.747:143): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c vm-ctx=system_u:system_r:svirt_t:s0:c357,c511 img-ctx=system_u:object_r:svirt_image_t:s0:c357,c511 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800479.857:144): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800479.857:145): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800479.857:146): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800479.857:147): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800479.857:148): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800479.858:149): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800479.858:150): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800479.858:151): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800479.858:152): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800479.858:153): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1345800479.858:154): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800479.858:155): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1345800479.873:156): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1345800479.873:156): arch=c000003e syscall=16 success=yes exit=0 a0=17 a1=89a2 a2=7f5cb1015bd0 a3=7f5cb1015930 items=0 ppid=1 pid=2687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1345800479.874:157): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c net=52:54:00:1E:F2:53 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800479.874:158): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800480.354:159): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c old-disk="?" new-disk="/var/lib/libvirt/images/testkf11.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800480.355:160): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800480.355:161): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800480.355:162): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c old-vcpu=0 new-vcpu=2 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1345800480.355:163): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c vm-pid=2865 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345800506.755:164): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345800506.755:165): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-ctx=system_u:system_r:svirt_t:s0:c593,c816 img-ctx=system_u:object_r:svirt_image_t:s0:c593,c816 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800506.865:166): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800506.865:167): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800506.865:168): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800506.865:169): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800506.865:170): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800506.865:171): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800506.865:172): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800506.865:173): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800506.865:174): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800506.865:175): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1345800506.866:176): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800506.866:177): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800506.923:178): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-disk="?" new-disk="/var/lib/libvirt/images/testkf10.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800506.923:179): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800506.923:180): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-mem=0 new-mem=524288 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800506.923:181): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-vcpu=0 new-vcpu=2 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1345800506.923:182): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=restored vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=ANOM_PROMISCUOUS msg=audit(1345800517.876:183): dev=vnet0 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=SYSCALL msg=audit(1345800517.876:183): arch=c000003e syscall=3 success=yes exit=0 a0=16 a1=7fffae7427e0 a2=8 a3=1 items=0 ppid=1 pid=2865 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=system_u:system_r:svirt_t:s0:c357,c511 key=(null) >type=VIRT_CONTROL msg=audit(1345800518.317:184): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345800523.863:185): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345800523.863:186): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-ctx=system_u:system_r:svirt_t:s0:c166,c777 img-ctx=system_u:object_r:svirt_image_t:s0:c166,c777 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800523.968:187): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800523.968:188): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800523.968:189): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800523.968:190): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800523.968:191): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800523.968:192): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800523.968:193): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800523.968:194): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800523.968:195): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800523.968:196): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1345800523.969:197): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800523.969:198): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800524.026:199): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-disk="?" new-disk="/var/lib/libvirt/images/testkf10.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800524.026:200): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800524.026:201): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-mem=0 new-mem=524288 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800524.026:202): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-vcpu=0 new-vcpu=2 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1345800524.026:203): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=restored vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_MACHINE_ID msg=audit(1345800539.003:204): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345800539.003:205): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c vm-ctx=system_u:system_r:svirt_t:s0:c471,c738 img-ctx=system_u:object_r:svirt_image_t:s0:c471,c738 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800539.108:206): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800539.108:207): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800539.108:208): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800539.108:209): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800539.108:210): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800539.108:211): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800539.108:212): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800539.108:213): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800539.108:214): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800539.109:215): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1345800539.109:216): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800539.109:217): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1345800539.110:218): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1345800539.110:218): arch=c000003e syscall=16 success=yes exit=0 a0=17 a1=89a2 a2=7f5cb0614bd0 a3=203a2032373a6573 items=0 ppid=1 pid=2688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1345800539.111:219): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c net=52:54:00:1E:F2:53 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800539.111:220): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800539.581:221): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c old-disk="?" new-disk="/var/lib/libvirt/images/testkf11.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800539.581:222): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800539.581:223): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800539.581:224): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c old-vcpu=0 new-vcpu=2 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1345800539.581:225): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c vm-pid=2991 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1345800601.582:226): user pid=3101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345800601.582:227): user pid=3101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345800601.590:228): pid=3101 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2 >type=USER_START msg=audit(1345800601.596:229): user pid=3101 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345800601.682:230): user pid=3101 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345800601.683:231): user pid=3101 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=VIRT_MACHINE_ID msg=audit(1345800659.957:232): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345800659.957:233): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-ctx=system_u:system_r:svirt_t:s0:c307,c991 img-ctx=system_u:object_r:svirt_image_t:s0:c307,c991 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800660.069:234): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800660.069:235): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800660.069:236): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800660.069:237): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800660.069:238): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800660.069:239): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800660.069:240): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800660.069:241): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800660.070:242): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800660.070:243): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1345800660.070:244): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800660.070:245): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800660.131:246): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-disk="?" new-disk="/var/lib/libvirt/images/testkf10.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800660.131:247): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800660.131:248): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-mem=0 new-mem=524288 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800660.131:249): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-vcpu=0 new-vcpu=2 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1345800660.131:250): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=restored vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=ANOM_PROMISCUOUS msg=audit(1345800675.504:251): dev=vnet0 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=SYSCALL msg=audit(1345800675.504:251): arch=c000003e syscall=3 success=yes exit=0 a0=16 a1=7fffd45b2920 a2=8 a3=1 items=0 ppid=1 pid=2991 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=system_u:system_r:svirt_t:s0:c471,c738 key=(null) >type=VIRT_CONTROL msg=audit(1345800675.947:252): user pid=2683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1345800681.673:253): table=nat family=2 entries=7 >type=SYSCALL msg=audit(1345800681.673:253): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1533800 items=0 ppid=3168 pid=3181 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800681.676:254): table=nat family=2 entries=6 >type=SYSCALL msg=audit(1345800681.676:254): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=f3b800 items=0 ppid=3168 pid=3182 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800681.678:255): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1345800681.678:255): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1bad5e0 items=0 ppid=3168 pid=3183 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800681.680:256): table=filter family=2 entries=13 >type=SYSCALL msg=audit(1345800681.680:256): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=ee0610 items=0 ppid=3168 pid=3184 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800681.682:257): table=filter family=2 entries=12 >type=SYSCALL msg=audit(1345800681.682:257): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=b249e0 items=0 ppid=3168 pid=3185 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800681.684:258): table=filter family=2 entries=11 >type=SYSCALL msg=audit(1345800681.684:258): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=239c860 items=0 ppid=3168 pid=3186 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800681.687:259): table=filter family=2 entries=10 >type=SYSCALL msg=audit(1345800681.687:259): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=e3eb30 items=0 ppid=3168 pid=3187 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800681.689:260): table=filter family=2 entries=9 >type=SYSCALL msg=audit(1345800681.689:260): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1ef99b0 items=0 ppid=3168 pid=3188 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800681.691:261): table=filter family=2 entries=8 >type=SYSCALL msg=audit(1345800681.691:261): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1690090 items=0 ppid=3168 pid=3189 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800681.693:262): table=filter family=2 entries=7 >type=SYSCALL msg=audit(1345800681.693:262): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=b077f0 items=0 ppid=3168 pid=3190 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800681.696:263): table=mangle family=2 entries=7 >type=SYSCALL msg=audit(1345800681.696:263): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=935290 items=0 ppid=3168 pid=3191 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800681.698:264): table=filter family=2 entries=6 >type=SYSCALL msg=audit(1345800681.698:264): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1e6a7f0 items=0 ppid=3168 pid=3192 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800681.700:265): table=filter family=2 entries=5 >type=SYSCALL msg=audit(1345800681.700:265): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=21267f0 items=0 ppid=3168 pid=3193 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800681.703:266): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1345800681.703:266): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=20757f0 items=0 ppid=3168 pid=3194 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800681.705:267): table=filter family=2 entries=5 >type=SYSCALL msg=audit(1345800681.705:267): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=23247f0 items=0 ppid=3168 pid=3195 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800681.707:268): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1345800681.707:268): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=199e290 items=0 ppid=3168 pid=3196 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800681.710:269): table=filter family=2 entries=6 >type=SYSCALL msg=audit(1345800681.710:269): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1f15e50 items=0 ppid=3168 pid=3197 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800681.712:270): table=filter family=2 entries=7 >type=SYSCALL msg=audit(1345800681.712:270): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=c67fc0 items=0 ppid=3168 pid=3198 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800681.714:271): table=filter family=2 entries=8 >type=SYSCALL msg=audit(1345800681.714:271): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=21bd920 items=0 ppid=3168 pid=3199 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800681.716:272): table=filter family=2 entries=9 >type=SYSCALL msg=audit(1345800681.716:272): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=acba90 items=0 ppid=3168 pid=3200 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800681.718:273): table=filter family=2 entries=10 >type=SYSCALL msg=audit(1345800681.718:273): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=26a87d0 items=0 ppid=3168 pid=3201 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800681.720:274): table=filter family=2 entries=11 >type=SYSCALL msg=audit(1345800681.720:274): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=250e940 items=0 ppid=3168 pid=3202 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800681.723:275): table=filter family=2 entries=12 >type=SYSCALL msg=audit(1345800681.723:275): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=b04550 items=0 ppid=3168 pid=3203 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800681.725:276): table=nat family=2 entries=4 >type=SYSCALL msg=audit(1345800681.725:276): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=12a0620 items=0 ppid=3168 pid=3204 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800681.727:277): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1345800681.727:277): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=2732800 items=0 ppid=3168 pid=3205 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800681.729:278): table=nat family=2 entries=6 >type=SYSCALL msg=audit(1345800681.729:278): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=dc4700 items=0 ppid=3168 pid=3206 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800682.231:279): table=filter family=10 entries=0 >type=NETFILTER_CFG msg=audit(1345800682.231:279): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1345800682.231:279): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1345800682.231:279): table=mangle family=2 entries=0 >type=SYSCALL msg=audit(1345800682.231:279): arch=c000003e syscall=56 success=yes exit=3253 a0=6c020011 a1=7f2fa019bee0 a2=8 a3=a7373 items=0 ppid=1 pid=3179 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=SYSCALL msg=audit(1345800682.231:280): arch=c000003e syscall=56 success=yes exit=0 a0=6c020011 a1=7f2fa019bee0 a2=8 a3=a7373 items=0 ppid=3179 pid=3253 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=FD_PAIR msg=audit(1345800682.231:280): fd0=0 fd1=0 >type=VIRT_MACHINE_ID msg=audit(1345800695.386:281): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345800695.386:282): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-ctx=unconfined_u:system_r:svirt_t:s0:c264,c975 img-ctx=unconfined_u:object_r:svirt_image_t:s0:c264,c975 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800695.485:283): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800695.485:284): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800695.485:285): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800695.485:286): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800695.486:287): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800695.486:288): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800695.486:289): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800695.486:290): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800695.486:291): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800695.486:292): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1345800695.486:293): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800695.486:294): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800695.543:295): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-disk="?" new-disk="/var/lib/libvirt/images/testkf10.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800695.543:296): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800695.543:297): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-mem=0 new-mem=524288 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800695.543:298): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-vcpu=0 new-vcpu=2 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1345800695.543:299): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=restored vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_MACHINE_ID msg=audit(1345800704.639:300): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345800704.639:301): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c vm-ctx=unconfined_u:system_r:svirt_t:s0:c37,c94 img-ctx=unconfined_u:object_r:svirt_image_t:s0:c37,c94 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800704.739:302): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800704.740:303): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800704.740:304): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800704.740:305): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800704.740:306): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800704.740:307): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800704.740:308): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800704.740:309): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800704.740:310): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800704.740:311): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1345800704.740:312): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800704.741:313): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1345800704.756:314): dev=vnet0 prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=1 >type=SYSCALL msg=audit(1345800704.756:314): arch=c000003e syscall=16 success=yes exit=0 a0=17 a1=89a2 a2=7f2fae4e1bd0 a3=7f2fae4e1930 items=0 ppid=1 pid=3171 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1345800704.757:315): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c net=52:54:00:1E:F2:53 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800704.757:316): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800705.198:317): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c old-disk="?" new-disk="/var/lib/libvirt/images/testkf11.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800705.198:318): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800705.198:319): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800705.198:320): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c old-vcpu=0 new-vcpu=2 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1345800705.198:321): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c vm-pid=3272 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345800745.829:322): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345800745.829:323): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-ctx=unconfined_u:system_r:svirt_t:s0:c148,c456 img-ctx=unconfined_u:object_r:svirt_image_t:s0:c148,c456 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800745.936:324): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800745.936:325): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800745.936:326): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800745.936:327): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800745.936:328): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800745.936:329): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800745.937:330): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800745.937:331): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800745.937:332): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800745.937:333): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1345800745.937:334): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800745.937:335): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800746.002:336): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-disk="?" new-disk="/var/lib/libvirt/images/testkf10.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800746.002:337): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800746.002:338): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-mem=0 new-mem=1048576 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800746.002:339): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-vcpu=0 new-vcpu=2 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1345800746.002:340): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=restored vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=ANOM_PROMISCUOUS msg=audit(1345800753.414:341): dev=vnet0 prom=0 old_prom=256 auid=0 uid=107 gid=107 ses=1 >type=SYSCALL msg=audit(1345800753.414:341): arch=c000003e syscall=3 success=yes exit=0 a0=16 a1=7fff0e0749d0 a2=8 a3=1 items=0 ppid=1 pid=3272 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=1 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:svirt_t:s0:c37,c94 key=(null) >type=VIRT_CONTROL msg=audit(1345800753.861:342): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345800758.290:343): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345800758.290:344): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-ctx=unconfined_u:system_r:svirt_t:s0:c307,c750 img-ctx=unconfined_u:object_r:svirt_image_t:s0:c307,c750 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800758.396:345): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800758.396:346): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800758.396:347): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800758.396:348): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800758.396:349): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800758.396:350): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800758.397:351): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800758.397:352): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800758.397:353): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800758.397:354): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1345800758.397:355): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800758.397:356): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800758.454:357): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-disk="?" new-disk="/var/lib/libvirt/images/testkf10.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800758.454:358): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800758.454:359): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-mem=0 new-mem=1048576 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800758.454:360): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-vcpu=0 new-vcpu=2 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1345800758.454:361): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=restored vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_MACHINE_ID msg=audit(1345800764.554:362): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345800764.554:363): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c vm-ctx=unconfined_u:system_r:svirt_t:s0:c47,c545 img-ctx=unconfined_u:object_r:svirt_image_t:s0:c47,c545 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800764.660:364): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800764.660:365): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800764.660:366): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800764.660:367): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800764.660:368): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800764.660:369): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800764.660:370): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800764.660:371): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800764.661:372): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800764.661:373): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1345800764.661:374): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800764.661:375): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1345800764.671:376): dev=vnet0 prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=1 >type=SYSCALL msg=audit(1345800764.671:376): arch=c000003e syscall=16 success=yes exit=0 a0=1a a1=89a2 a2=7f2fadae0bd0 a3=203a2032373a6573 items=0 ppid=1 pid=3172 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1345800764.672:377): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c net=52:54:00:1E:F2:53 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800764.672:378): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800765.092:379): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c old-disk="?" new-disk="/var/lib/libvirt/images/testkf11.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800765.092:380): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800765.092:381): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345800765.092:382): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c old-vcpu=0 new-vcpu=2 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1345800765.092:383): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c vm-pid=3466 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1345800891.195:384): dev=virbr0-nic prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=1 >type=SYSCALL msg=audit(1345800891.195:384): arch=c000003e syscall=3 success=yes exit=0 a0=18 a1=1 a2=0 a3=7f2fadae1790 items=0 ppid=1 pid=3172 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800891.223:385): table=nat family=2 entries=7 >type=SYSCALL msg=audit(1345800891.223:385): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=fef800 items=0 ppid=3168 pid=3736 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800891.228:386): table=nat family=2 entries=6 >type=SYSCALL msg=audit(1345800891.228:386): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=f1d800 items=0 ppid=3168 pid=3737 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800891.232:387): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1345800891.232:387): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=9f65e0 items=0 ppid=3168 pid=3740 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800891.235:388): table=filter family=2 entries=13 >type=SYSCALL msg=audit(1345800891.235:388): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=9e8610 items=0 ppid=3168 pid=3741 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800891.239:389): table=filter family=2 entries=12 >type=SYSCALL msg=audit(1345800891.239:389): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=164a9e0 items=0 ppid=3168 pid=3742 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800891.243:390): table=filter family=2 entries=11 >type=SYSCALL msg=audit(1345800891.243:390): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1187860 items=0 ppid=3168 pid=3748 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800891.247:391): table=filter family=2 entries=10 >type=SYSCALL msg=audit(1345800891.247:391): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1d59b30 items=0 ppid=3168 pid=3751 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800891.250:392): table=filter family=2 entries=9 >type=SYSCALL msg=audit(1345800891.250:392): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1b869b0 items=0 ppid=3168 pid=3752 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800891.253:393): table=filter family=2 entries=8 >type=SYSCALL msg=audit(1345800891.253:393): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1a2f090 items=0 ppid=3168 pid=3753 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800891.257:394): table=filter family=2 entries=7 >type=SYSCALL msg=audit(1345800891.257:394): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=13e77f0 items=0 ppid=3168 pid=3754 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800891.260:395): table=mangle family=2 entries=7 >type=SYSCALL msg=audit(1345800891.260:395): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=19ff290 items=0 ppid=3168 pid=3755 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800891.264:396): table=filter family=2 entries=6 >type=SYSCALL msg=audit(1345800891.264:396): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=9b07f0 items=0 ppid=3168 pid=3756 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800891.267:397): table=filter family=2 entries=5 >type=SYSCALL msg=audit(1345800891.267:397): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=27537f0 items=0 ppid=3168 pid=3757 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1345800891.267:398): dev=vnet0 prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=1 >type=SYSCALL msg=audit(1345800891.267:398): arch=c000003e syscall=16 success=yes exit=0 a0=18 a1=89a1 a2=7f2fa000d3f0 a3=7f2fadae1790 items=0 ppid=1 pid=3172 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1345800921.386:399): dev=virbr0-nic prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=1 >type=SYSCALL msg=audit(1345800921.386:399): arch=c000003e syscall=16 success=yes exit=0 a0=18 a1=89a2 a2=7f2faf8e48c0 a3=203a2032373a6573 items=0 ppid=1 pid=3169 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800921.391:400): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1345800921.391:400): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=15dc7f0 items=0 ppid=3168 pid=3812 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800921.395:401): table=filter family=2 entries=5 >type=SYSCALL msg=audit(1345800921.395:401): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=12c47f0 items=0 ppid=3168 pid=3813 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800921.399:402): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1345800921.399:402): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=21d5290 items=0 ppid=3168 pid=3816 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800921.403:403): table=filter family=2 entries=6 >type=SYSCALL msg=audit(1345800921.403:403): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1ec4e50 items=0 ppid=3168 pid=3820 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800921.407:404): table=filter family=2 entries=7 >type=SYSCALL msg=audit(1345800921.407:404): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=9dbfc0 items=0 ppid=3168 pid=3823 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800921.410:405): table=filter family=2 entries=8 >type=SYSCALL msg=audit(1345800921.410:405): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=141f920 items=0 ppid=3168 pid=3824 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800921.414:406): table=filter family=2 entries=9 >type=SYSCALL msg=audit(1345800921.414:406): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1823a90 items=0 ppid=3168 pid=3825 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800921.418:407): table=filter family=2 entries=10 >type=SYSCALL msg=audit(1345800921.418:407): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=21ce7d0 items=0 ppid=3168 pid=3831 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800921.422:408): table=filter family=2 entries=11 >type=SYSCALL msg=audit(1345800921.422:408): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=16de940 items=0 ppid=3168 pid=3835 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800921.426:409): table=filter family=2 entries=12 >type=SYSCALL msg=audit(1345800921.426:409): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1b2a550 items=0 ppid=3168 pid=3840 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800921.429:410): table=nat family=2 entries=4 >type=SYSCALL msg=audit(1345800921.429:410): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=2400620 items=0 ppid=3168 pid=3841 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800921.432:411): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1345800921.432:411): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1288800 items=0 ppid=3168 pid=3842 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800921.436:412): table=nat family=2 entries=6 >type=SYSCALL msg=audit(1345800921.436:412): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1c90700 items=0 ppid=3168 pid=3843 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1345800976.255:413): dev=virbr0-nic prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=1 >type=SYSCALL msg=audit(1345800976.255:413): arch=c000003e syscall=3 success=yes exit=0 a0=18 a1=1 a2=0 a3=b items=0 ppid=1 pid=3173 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800976.282:414): table=nat family=2 entries=7 >type=SYSCALL msg=audit(1345800976.282:414): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1a40800 items=0 ppid=3168 pid=3948 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800976.285:415): table=nat family=2 entries=6 >type=SYSCALL msg=audit(1345800976.285:415): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=8ca800 items=0 ppid=3168 pid=3949 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800976.289:416): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1345800976.289:416): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=d175e0 items=0 ppid=3168 pid=3950 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800976.293:417): table=filter family=2 entries=13 >type=SYSCALL msg=audit(1345800976.293:417): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1fd7610 items=0 ppid=3168 pid=3955 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800976.297:418): table=filter family=2 entries=12 >type=SYSCALL msg=audit(1345800976.297:418): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=133b9e0 items=0 ppid=3168 pid=3959 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800976.300:419): table=filter family=2 entries=11 >type=SYSCALL msg=audit(1345800976.300:419): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=13fb860 items=0 ppid=3168 pid=3960 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800976.303:420): table=filter family=2 entries=10 >type=SYSCALL msg=audit(1345800976.303:420): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=27cfb30 items=0 ppid=3168 pid=3961 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800976.306:421): table=filter family=2 entries=9 >type=SYSCALL msg=audit(1345800976.306:421): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=f5f9b0 items=0 ppid=3168 pid=3962 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800976.310:422): table=filter family=2 entries=8 >type=SYSCALL msg=audit(1345800976.310:422): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=18d7090 items=0 ppid=3168 pid=3963 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800976.313:423): table=filter family=2 entries=7 >type=SYSCALL msg=audit(1345800976.313:423): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=25157f0 items=0 ppid=3168 pid=3964 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800976.317:424): table=mangle family=2 entries=7 >type=SYSCALL msg=audit(1345800976.317:424): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=16fe290 items=0 ppid=3168 pid=3965 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800976.320:425): table=filter family=2 entries=6 >type=SYSCALL msg=audit(1345800976.320:425): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=114e7f0 items=0 ppid=3168 pid=3966 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800976.323:426): table=filter family=2 entries=5 >type=SYSCALL msg=audit(1345800976.323:426): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1a8f7f0 items=0 ppid=3168 pid=3967 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1345800985.772:427): dev=virbr0-nic prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=1 >type=SYSCALL msg=audit(1345800985.772:427): arch=c000003e syscall=16 success=yes exit=0 a0=18 a1=89a2 a2=7f2fadae18c0 a3=203a2032373a6573 items=0 ppid=1 pid=3172 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800985.776:428): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1345800985.776:428): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=179b7f0 items=0 ppid=3168 pid=3998 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800985.781:429): table=filter family=2 entries=5 >type=SYSCALL msg=audit(1345800985.781:429): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=203a7f0 items=0 ppid=3168 pid=4001 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800985.784:430): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1345800985.784:430): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=2662290 items=0 ppid=3168 pid=4002 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800985.788:431): table=filter family=2 entries=6 >type=SYSCALL msg=audit(1345800985.788:431): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1dd6e50 items=0 ppid=3168 pid=4003 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800985.793:432): table=filter family=2 entries=7 >type=SYSCALL msg=audit(1345800985.793:432): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=155afc0 items=0 ppid=3168 pid=4009 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800985.797:433): table=filter family=2 entries=8 >type=SYSCALL msg=audit(1345800985.797:433): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=b6f920 items=0 ppid=3168 pid=4010 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800985.800:434): table=filter family=2 entries=9 >type=SYSCALL msg=audit(1345800985.800:434): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1c3da90 items=0 ppid=3168 pid=4013 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800985.803:435): table=filter family=2 entries=10 >type=SYSCALL msg=audit(1345800985.803:435): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=110e7d0 items=0 ppid=3168 pid=4014 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800985.807:436): table=filter family=2 entries=11 >type=SYSCALL msg=audit(1345800985.807:436): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=2708940 items=0 ppid=3168 pid=4016 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800985.811:437): table=filter family=2 entries=12 >type=SYSCALL msg=audit(1345800985.811:437): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=872550 items=0 ppid=3168 pid=4021 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800985.814:438): table=nat family=2 entries=4 >type=SYSCALL msg=audit(1345800985.814:438): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=25e3620 items=0 ppid=3168 pid=4028 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800985.818:439): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1345800985.818:439): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=14b8800 items=0 ppid=3168 pid=4030 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345800985.821:440): table=nat family=2 entries=6 >type=SYSCALL msg=audit(1345800985.821:440): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=15a6700 items=0 ppid=3168 pid=4031 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=VIRT_MACHINE_ID msg=audit(1345801082.175:441): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345801082.175:442): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-ctx=unconfined_u:system_r:svirt_t:s0:c279,c558 img-ctx=unconfined_u:object_r:svirt_image_t:s0:c279,c558 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801082.282:443): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801082.282:444): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801082.283:445): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801082.283:446): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801082.283:447): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801082.283:448): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801082.283:449): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801082.283:450): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801082.284:451): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801082.284:452): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1345801082.284:453): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801082.284:454): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801082.344:455): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-disk="?" new-disk="/var/lib/libvirt/images/testkf10.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801082.344:456): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801082.344:457): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-mem=0 new-mem=1048576 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801082.344:458): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-vcpu=0 new-vcpu=2 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1345801082.344:459): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=restored vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_CONTROL msg=audit(1345801093.032:460): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345801098.344:461): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345801098.344:462): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c vm-ctx=unconfined_u:system_r:svirt_t:s0:c48,c605 img-ctx=unconfined_u:object_r:svirt_image_t:s0:c48,c605 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801098.455:463): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801098.455:464): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801098.455:465): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801098.455:466): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801098.455:467): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801098.455:468): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801098.455:469): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801098.455:470): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801098.455:471): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801098.455:472): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1345801098.455:473): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801098.455:474): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1345801098.464:475): dev=vnet0 prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=1 >type=SYSCALL msg=audit(1345801098.464:475): arch=c000003e syscall=16 success=yes exit=0 a0=1a a1=89a2 a2=7f2fad0dfbd0 a3=203a2032373a6573 items=0 ppid=1 pid=3173 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1345801098.464:476): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c net=52:54:00:1E:F2:53 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801098.465:477): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801098.903:478): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c old-disk="?" new-disk="/var/lib/libvirt/images/testkf11.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801098.904:479): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801098.904:480): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801098.904:481): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c old-vcpu=0 new-vcpu=2 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1345801098.904:482): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c vm-pid=4218 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345801108.057:483): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345801108.057:484): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-ctx=unconfined_u:system_r:svirt_t:s0:c440,c752 img-ctx=unconfined_u:object_r:svirt_image_t:s0:c440,c752 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801108.173:485): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801108.174:486): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801108.174:487): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801108.174:488): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801108.174:489): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801108.174:490): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801108.174:491): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801108.174:492): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801108.174:493): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801108.174:494): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1345801108.174:495): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801108.174:496): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801108.229:497): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-disk="?" new-disk="/var/lib/libvirt/images/testkf10.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801108.230:498): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801108.230:499): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-mem=0 new-mem=1048576 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801108.230:500): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-vcpu=0 new-vcpu=2 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1345801108.230:501): user pid=3168 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=restored vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=USER_ACCT msg=audit(1345801201.714:502): user pid=4447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345801201.714:503): user pid=4447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345801201.722:504): pid=4447 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3 >type=USER_START msg=audit(1345801201.729:505): user pid=4447 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345801201.775:506): user pid=4447 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345801201.775:507): user pid=4447 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=NETFILTER_CFG msg=audit(1345801226.707:508): table=nat family=2 entries=7 >type=SYSCALL msg=audit(1345801226.707:508): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=b22800 items=0 ppid=4972 pid=4985 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345801226.710:509): table=nat family=2 entries=6 >type=SYSCALL msg=audit(1345801226.710:509): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=14a1800 items=0 ppid=4972 pid=4986 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345801226.713:510): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1345801226.713:510): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=245a5e0 items=0 ppid=4972 pid=4987 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345801226.715:511): table=filter family=2 entries=13 >type=SYSCALL msg=audit(1345801226.715:511): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=c14610 items=0 ppid=4972 pid=4988 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345801226.718:512): table=filter family=2 entries=12 >type=SYSCALL msg=audit(1345801226.718:512): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1bcc9e0 items=0 ppid=4972 pid=4989 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345801226.720:513): table=filter family=2 entries=11 >type=SYSCALL msg=audit(1345801226.720:513): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1e6b860 items=0 ppid=4972 pid=4990 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345801226.723:514): table=filter family=2 entries=10 >type=SYSCALL msg=audit(1345801226.723:514): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=2612b30 items=0 ppid=4972 pid=4991 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345801226.725:515): table=filter family=2 entries=9 >type=SYSCALL msg=audit(1345801226.725:515): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=22be9b0 items=0 ppid=4972 pid=4992 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345801226.728:516): table=filter family=2 entries=8 >type=SYSCALL msg=audit(1345801226.728:516): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=10b3090 items=0 ppid=4972 pid=4993 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345801226.731:517): table=filter family=2 entries=7 >type=SYSCALL msg=audit(1345801226.731:517): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=18ac7f0 items=0 ppid=4972 pid=4994 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345801226.733:518): table=mangle family=2 entries=7 >type=SYSCALL msg=audit(1345801226.733:518): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1cc1290 items=0 ppid=4972 pid=4995 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345801226.736:519): table=filter family=2 entries=6 >type=SYSCALL msg=audit(1345801226.736:519): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=130f7f0 items=0 ppid=4972 pid=4996 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345801226.739:520): table=filter family=2 entries=5 >type=SYSCALL msg=audit(1345801226.739:520): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1f667f0 items=0 ppid=4972 pid=4997 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345801226.741:521): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1345801226.741:521): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=d707f0 items=0 ppid=4972 pid=4998 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345801226.744:522): table=filter family=2 entries=5 >type=SYSCALL msg=audit(1345801226.744:522): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=99c7f0 items=0 ppid=4972 pid=4999 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345801226.747:523): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1345801226.747:523): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1591290 items=0 ppid=4972 pid=5000 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345801226.750:524): table=filter family=2 entries=6 >type=SYSCALL msg=audit(1345801226.750:524): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=222de50 items=0 ppid=4972 pid=5001 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345801226.753:525): table=filter family=2 entries=7 >type=SYSCALL msg=audit(1345801226.753:525): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1000fc0 items=0 ppid=4972 pid=5002 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345801226.755:526): table=filter family=2 entries=8 >type=SYSCALL msg=audit(1345801226.755:526): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=2805920 items=0 ppid=4972 pid=5003 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345801226.758:527): table=filter family=2 entries=9 >type=SYSCALL msg=audit(1345801226.758:527): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=c11a90 items=0 ppid=4972 pid=5004 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345801226.760:528): table=filter family=2 entries=10 >type=SYSCALL msg=audit(1345801226.760:528): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=14277d0 items=0 ppid=4972 pid=5005 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345801226.762:529): table=filter family=2 entries=11 >type=SYSCALL msg=audit(1345801226.762:529): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1ad8940 items=0 ppid=4972 pid=5006 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345801226.765:530): table=filter family=2 entries=12 >type=SYSCALL msg=audit(1345801226.765:530): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=11aa550 items=0 ppid=4972 pid=5007 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345801226.767:531): table=nat family=2 entries=4 >type=SYSCALL msg=audit(1345801226.767:531): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=155d620 items=0 ppid=4972 pid=5008 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345801226.770:532): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1345801226.770:532): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=202b800 items=0 ppid=4972 pid=5009 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345801226.772:533): table=nat family=2 entries=6 >type=SYSCALL msg=audit(1345801226.772:533): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=2512700 items=0 ppid=4972 pid=5010 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345801227.262:534): table=filter family=10 entries=0 >type=NETFILTER_CFG msg=audit(1345801227.262:534): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1345801227.262:534): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1345801227.262:534): table=mangle family=2 entries=0 >type=SYSCALL msg=audit(1345801227.262:534): arch=c000003e syscall=56 success=yes exit=5058 a0=6c020011 a1=7f46dc191ad0 a2=8 a3=a7373 items=0 ppid=1 pid=4983 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=SYSCALL msg=audit(1345801227.262:535): arch=c000003e syscall=56 success=yes exit=0 a0=6c020011 a1=7f46dc191ad0 a2=8 a3=a7373 items=0 ppid=4983 pid=5058 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=FD_PAIR msg=audit(1345801227.262:535): fd0=0 fd1=0 >type=ANOM_PROMISCUOUS msg=audit(1345801233.415:536): dev=vnet0 prom=0 old_prom=256 auid=0 uid=107 gid=107 ses=1 >type=SYSCALL msg=audit(1345801233.415:536): arch=c000003e syscall=3 success=yes exit=0 a0=19 a1=7fff97de81b0 a2=8 a3=1 items=0 ppid=1 pid=4218 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=1 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:svirt_t:s0:c48,c605 key=(null) >type=VIRT_CONTROL msg=audit(1345801233.888:537): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345801236.750:538): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345801236.750:539): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-ctx=unconfined_u:system_r:svirt_t:s0:c41,c959 img-ctx=unconfined_u:object_r:svirt_image_t:s0:c41,c959 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801236.856:540): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801236.857:541): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801236.857:542): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801236.857:543): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801236.857:544): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801236.857:545): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801236.857:546): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801236.857:547): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801236.857:548): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801236.858:549): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1345801236.858:550): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801236.858:551): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801236.918:552): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-disk="?" new-disk="/var/lib/libvirt/images/testkf10.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801236.918:553): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801236.918:554): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-mem=0 new-mem=1048576 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801236.918:555): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-vcpu=0 new-vcpu=2 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1345801236.918:556): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=restored vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_MACHINE_ID msg=audit(1345801245.532:557): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345801245.533:558): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c vm-ctx=unconfined_u:system_r:svirt_t:s0:c73,c994 img-ctx=unconfined_u:object_r:svirt_image_t:s0:c73,c994 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801245.643:559): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801245.644:560): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801245.644:561): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801245.644:562): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801245.644:563): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801245.644:564): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801245.644:565): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801245.644:566): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801245.644:567): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801245.644:568): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1345801245.645:569): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801245.645:570): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1345801245.659:571): dev=vnet0 prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=1 >type=SYSCALL msg=audit(1345801245.659:571): arch=c000003e syscall=16 success=yes exit=0 a0=17 a1=89a2 a2=7f46e7ec3bd0 a3=7f46e7ec3930 items=0 ppid=1 pid=4975 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1345801245.660:572): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c net=52:54:00:1E:F2:53 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801245.660:573): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801246.084:574): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c old-disk="?" new-disk="/var/lib/libvirt/images/testkf11.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801246.084:575): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801246.084:576): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801246.084:577): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c old-vcpu=0 new-vcpu=2 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1345801246.084:578): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c vm-pid=5112 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1345801306.061:579): dev=vnet0 prom=0 old_prom=256 auid=0 uid=107 gid=107 ses=1 >type=SYSCALL msg=audit(1345801306.061:579): arch=c000003e syscall=3 success=yes exit=0 a0=16 a1=7ffff1429970 a2=8 a3=1 items=0 ppid=1 pid=5112 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=1 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:svirt_t:s0:c73,c994 key=(null) >type=VIRT_CONTROL msg=audit(1345801306.566:580): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345801313.742:581): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c vm-ctx=? img-ctx=? model=? exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345801313.742:582): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c vm-ctx=? img-ctx=? model=stack exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345801313.742:583): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345801313.742:584): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c vm-ctx=unconfined_u:system_r:svirt_t:s0:c462,c666 img-ctx=unconfined_u:object_r:svirt_image_t:s0:c462,c666 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801313.853:585): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801313.853:586): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801313.853:587): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801313.853:588): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801313.853:589): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801313.853:590): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801313.853:591): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801313.853:592): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801313.854:593): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801313.854:594): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1345801313.854:595): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801313.854:596): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1345801313.861:597): dev=vnet0 prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=1 >type=SYSCALL msg=audit(1345801313.861:597): arch=c000003e syscall=16 success=yes exit=0 a0=17 a1=89a2 a2=7f46e88c4bd0 a3=203a2032373a6573 items=0 ppid=1 pid=4974 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1345801313.862:598): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c net=52:54:00:1E:F2:53 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801313.862:599): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801314.333:600): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c old-disk="?" new-disk="/var/lib/libvirt/images/testkf11.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801314.333:601): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801314.333:602): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801314.333:603): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c old-vcpu=0 new-vcpu=2 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1345801314.333:604): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c vm-pid=5320 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345801685.517:605): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345801685.517:606): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-ctx=unconfined_u:system_r:svirt_t:s0:c317,c623 img-ctx=unconfined_u:object_r:svirt_image_t:s0:c317,c623 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801685.620:607): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801685.621:608): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801685.621:609): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801685.621:610): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801685.621:611): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801685.621:612): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801685.621:613): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801685.621:614): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801685.621:615): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801685.621:616): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1345801685.622:617): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801685.622:618): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801685.679:619): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-disk="?" new-disk="/var/lib/libvirt/images/testkf10.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801685.679:620): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801685.679:621): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-mem=0 new-mem=1048576 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801685.679:622): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-vcpu=0 new-vcpu=2 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1345801685.679:623): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=restored vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=USER_ACCT msg=audit(1345801801.811:624): user pid=6001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345801801.811:625): user pid=6001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345801801.812:626): pid=6001 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4 >type=USER_START msg=audit(1345801801.822:627): user pid=6001 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345801801.895:628): user pid=6001 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345801801.896:629): user pid=6001 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=ANOM_PROMISCUOUS msg=audit(1345801888.888:630): dev=vnet0 prom=0 old_prom=256 auid=0 uid=107 gid=107 ses=1 >type=SYSCALL msg=audit(1345801888.888:630): arch=c000003e syscall=3 success=yes exit=0 a0=16 a1=7fffcc309ab0 a2=8 a3=1 items=0 ppid=1 pid=5320 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=1 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:svirt_t:s0:c462,c666 key=(null) >type=VIRT_CONTROL msg=audit(1345801889.565:631): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345801893.564:632): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c vm-ctx=? img-ctx=? model=stack exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345801893.564:633): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345801893.564:634): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c vm-ctx=unconfined_u:system_r:svirt_t:s0:c598,c845 img-ctx=unconfined_u:object_r:svirt_image_t:s0:c598,c845 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801893.680:635): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801893.680:636): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801893.680:637): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801893.680:638): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801893.680:639): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801893.680:640): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801893.680:641): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801893.680:642): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801893.680:643): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801893.680:644): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1345801893.681:645): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801893.681:646): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c cgroup="/cgroup/devices/libvirt/qemu/testtwo/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1345801893.688:647): dev=vnet0 prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=1 >type=SYSCALL msg=audit(1345801893.688:647): arch=c000003e syscall=16 success=yes exit=0 a0=17 a1=89a2 a2=7f46e7ec3bd0 a3=203a2032373a6573 items=0 ppid=1 pid=4975 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1345801893.689:648): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c net=52:54:00:1E:F2:53 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801893.689:649): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801894.156:650): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c old-disk="?" new-disk="/var/lib/libvirt/images/testkf11.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801894.157:651): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801894.157:652): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345801894.157:653): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c old-vcpu=0 new-vcpu=2 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1345801894.157:654): user pid=4972 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c vm-pid=6145 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1345801971.009:655): table=nat family=2 entries=7 >type=SYSCALL msg=audit(1345801971.009:655): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1162800 items=0 ppid=6352 pid=6365 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345801971.013:656): table=nat family=2 entries=6 >type=SYSCALL msg=audit(1345801971.013:656): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=f04800 items=0 ppid=6352 pid=6366 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345801971.016:657): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1345801971.016:657): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=17b25e0 items=0 ppid=6352 pid=6367 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345801971.019:658): table=filter family=2 entries=13 >type=SYSCALL msg=audit(1345801971.019:658): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1415610 items=0 ppid=6352 pid=6368 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345801971.021:659): table=filter family=2 entries=12 >type=SYSCALL msg=audit(1345801971.021:659): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=21ab9e0 items=0 ppid=6352 pid=6369 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345801971.024:660): table=filter family=2 entries=11 >type=SYSCALL msg=audit(1345801971.024:660): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1535860 items=0 ppid=6352 pid=6370 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345801971.026:661): table=filter family=2 entries=10 >type=SYSCALL msg=audit(1345801971.026:661): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=112ab30 items=0 ppid=6352 pid=6371 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345801971.028:662): table=filter family=2 entries=9 >type=SYSCALL msg=audit(1345801971.028:662): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=197c9b0 items=0 ppid=6352 pid=6372 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345801971.031:663): table=filter family=2 entries=8 >type=SYSCALL msg=audit(1345801971.031:663): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=958090 items=0 ppid=6352 pid=6373 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345801971.034:664): table=filter family=2 entries=7 >type=SYSCALL msg=audit(1345801971.034:664): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=f407f0 items=0 ppid=6352 pid=6374 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345801971.037:665): table=mangle family=2 entries=7 >type=SYSCALL msg=audit(1345801971.037:665): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=b49290 items=0 ppid=6352 pid=6375 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345801971.039:666): table=filter family=2 entries=6 >type=SYSCALL msg=audit(1345801971.039:666): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=13b47f0 items=0 ppid=6352 pid=6376 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345801971.042:667): table=filter family=2 entries=5 >type=SYSCALL msg=audit(1345801971.042:667): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=24a67f0 items=0 ppid=6352 pid=6377 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345801971.045:668): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1345801971.045:668): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=14427f0 items=0 ppid=6352 pid=6378 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345801971.047:669): table=filter family=2 entries=5 >type=SYSCALL msg=audit(1345801971.047:669): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=eea7f0 items=0 ppid=6352 pid=6379 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345801971.050:670): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1345801971.050:670): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1922290 items=0 ppid=6352 pid=6380 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345801971.053:671): table=filter family=2 entries=6 >type=SYSCALL msg=audit(1345801971.053:671): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=bfbe50 items=0 ppid=6352 pid=6381 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345801971.056:672): table=filter family=2 entries=7 >type=SYSCALL msg=audit(1345801971.056:672): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1590fc0 items=0 ppid=6352 pid=6382 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345801971.058:673): table=filter family=2 entries=8 >type=SYSCALL msg=audit(1345801971.058:673): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=89c920 items=0 ppid=6352 pid=6383 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345801971.060:674): table=filter family=2 entries=9 >type=SYSCALL msg=audit(1345801971.060:674): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1d04a90 items=0 ppid=6352 pid=6384 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345801971.063:675): table=filter family=2 entries=10 >type=SYSCALL msg=audit(1345801971.063:675): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1ae67d0 items=0 ppid=6352 pid=6385 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345801971.066:676): table=filter family=2 entries=11 >type=SYSCALL msg=audit(1345801971.066:676): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=15b9940 items=0 ppid=6352 pid=6386 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345801971.068:677): table=filter family=2 entries=12 >type=SYSCALL msg=audit(1345801971.068:677): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1485550 items=0 ppid=6352 pid=6387 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345801971.071:678): table=nat family=2 entries=4 >type=SYSCALL msg=audit(1345801971.071:678): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1e09620 items=0 ppid=6352 pid=6388 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345801971.073:679): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1345801971.073:679): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1705800 items=0 ppid=6352 pid=6389 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345801971.076:680): table=nat family=2 entries=6 >type=SYSCALL msg=audit(1345801971.076:680): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=ccd700 items=0 ppid=6352 pid=6390 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345801971.557:681): table=filter family=10 entries=0 >type=NETFILTER_CFG msg=audit(1345801971.557:681): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1345801971.557:681): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1345801971.557:681): table=mangle family=2 entries=0 >type=SYSCALL msg=audit(1345801971.557:681): arch=c000003e syscall=56 success=yes exit=6439 a0=6c020011 a1=7f70b018d5b0 a2=8 a3=a7373 items=0 ppid=1 pid=6363 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=SYSCALL msg=audit(1345801971.557:682): arch=c000003e syscall=56 success=yes exit=0 a0=6c020011 a1=7f70b018d5b0 a2=8 a3=a7373 items=0 ppid=6363 pid=6439 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=FD_PAIR msg=audit(1345801971.557:682): fd0=0 fd1=0 >type=VIRT_MACHINE_ID msg=audit(1345802223.706:683): user pid=6352 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345802223.707:684): user pid=6352 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-ctx=? img-ctx=? model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345802223.707:685): user pid=6352 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-ctx=? img-ctx=? model=none exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345802223.816:686): user pid=6352 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345802223.817:687): user pid=6352 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345802223.817:688): user pid=6352 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345802223.817:689): user pid=6352 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345802223.817:690): user pid=6352 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345802223.817:691): user pid=6352 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345802223.817:692): user pid=6352 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345802223.817:693): user pid=6352 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345802223.817:694): user pid=6352 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345802223.817:695): user pid=6352 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1345802223.818:696): user pid=6352 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345802223.818:697): user pid=6352 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345802223.874:698): user pid=6352 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-disk="?" new-disk="/var/lib/libvirt/images/testkf10.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345802223.874:699): user pid=6352 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345802223.874:700): user pid=6352 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-mem=0 new-mem=1048576 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345802223.874:701): user pid=6352 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-vcpu=0 new-vcpu=2 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1345802223.874:702): user pid=6352 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=restored vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=USER_ACCT msg=audit(1345802401.910:703): user pid=6935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345802401.910:704): user pid=6935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345802401.918:705): pid=6935 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=5 >type=USER_START msg=audit(1345802401.924:706): user pid=6935 uid=0 auid=0 ses=5 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345802401.976:707): user pid=6935 uid=0 auid=0 ses=5 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345802401.976:708): user pid=6935 uid=0 auid=0 ses=5 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345802461.987:709): user pid=7006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345802461.987:710): user pid=7006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345802461.988:711): pid=7006 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=6 >type=USER_START msg=audit(1345802461.996:712): user pid=7006 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345802462.067:713): user pid=7006 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345802462.067:714): user pid=7006 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=NETFILTER_CFG msg=audit(1345802565.634:715): table=nat family=2 entries=7 >type=SYSCALL msg=audit(1345802565.634:715): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=27c5800 items=0 ppid=7157 pid=7170 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345802565.638:716): table=nat family=2 entries=6 >type=SYSCALL msg=audit(1345802565.638:716): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=d1d800 items=0 ppid=7157 pid=7171 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345802565.640:717): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1345802565.640:717): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=20d45e0 items=0 ppid=7157 pid=7172 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345802565.643:718): table=filter family=2 entries=13 >type=SYSCALL msg=audit(1345802565.643:718): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1104610 items=0 ppid=7157 pid=7173 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345802565.645:719): table=filter family=2 entries=12 >type=SYSCALL msg=audit(1345802565.645:719): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=178b9e0 items=0 ppid=7157 pid=7174 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345802565.647:720): table=filter family=2 entries=11 >type=SYSCALL msg=audit(1345802565.647:720): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1d0d860 items=0 ppid=7157 pid=7175 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345802565.650:721): table=filter family=2 entries=10 >type=SYSCALL msg=audit(1345802565.650:721): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=22d0b30 items=0 ppid=7157 pid=7176 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345802565.652:722): table=filter family=2 entries=9 >type=SYSCALL msg=audit(1345802565.652:722): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=17699b0 items=0 ppid=7157 pid=7177 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345802565.655:723): table=filter family=2 entries=8 >type=SYSCALL msg=audit(1345802565.655:723): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=2160090 items=0 ppid=7157 pid=7178 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345802565.657:724): table=filter family=2 entries=7 >type=SYSCALL msg=audit(1345802565.657:724): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=161e7f0 items=0 ppid=7157 pid=7179 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345802565.660:725): table=mangle family=2 entries=7 >type=SYSCALL msg=audit(1345802565.660:725): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1eaf290 items=0 ppid=7157 pid=7180 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345802565.663:726): table=filter family=2 entries=6 >type=SYSCALL msg=audit(1345802565.663:726): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=21857f0 items=0 ppid=7157 pid=7181 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345802565.665:727): table=filter family=2 entries=5 >type=SYSCALL msg=audit(1345802565.665:727): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=17927f0 items=0 ppid=7157 pid=7182 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345802565.668:728): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1345802565.668:728): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=e407f0 items=0 ppid=7157 pid=7183 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345802565.670:729): table=filter family=2 entries=5 >type=SYSCALL msg=audit(1345802565.670:729): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1da57f0 items=0 ppid=7157 pid=7184 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345802565.673:730): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1345802565.673:730): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1443290 items=0 ppid=7157 pid=7185 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345802565.675:731): table=filter family=2 entries=6 >type=SYSCALL msg=audit(1345802565.675:731): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=2569e50 items=0 ppid=7157 pid=7186 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345802565.678:732): table=filter family=2 entries=7 >type=SYSCALL msg=audit(1345802565.678:732): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=2450fc0 items=0 ppid=7157 pid=7187 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345802565.680:733): table=filter family=2 entries=8 >type=SYSCALL msg=audit(1345802565.680:733): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=20cd920 items=0 ppid=7157 pid=7188 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345802565.682:734): table=filter family=2 entries=9 >type=SYSCALL msg=audit(1345802565.682:734): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=89fa90 items=0 ppid=7157 pid=7189 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345802565.684:735): table=filter family=2 entries=10 >type=SYSCALL msg=audit(1345802565.684:735): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=8c17d0 items=0 ppid=7157 pid=7190 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345802565.686:736): table=filter family=2 entries=11 >type=SYSCALL msg=audit(1345802565.686:736): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=107d940 items=0 ppid=7157 pid=7191 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345802565.688:737): table=filter family=2 entries=12 >type=SYSCALL msg=audit(1345802565.688:737): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=2387550 items=0 ppid=7157 pid=7192 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345802565.691:738): table=nat family=2 entries=4 >type=SYSCALL msg=audit(1345802565.691:738): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1624620 items=0 ppid=7157 pid=7193 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345802565.693:739): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1345802565.693:739): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=d90800 items=0 ppid=7157 pid=7194 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345802565.695:740): table=nat family=2 entries=6 >type=SYSCALL msg=audit(1345802565.695:740): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=25c7700 items=0 ppid=7157 pid=7195 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1345802566.140:741): table=filter family=10 entries=0 >type=NETFILTER_CFG msg=audit(1345802566.140:741): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1345802566.140:741): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1345802566.140:741): table=mangle family=2 entries=0 >type=SYSCALL msg=audit(1345802566.140:741): arch=c000003e syscall=56 success=yes exit=7244 a0=6c020011 a1=7f998018d660 a2=8 a3=a7373 items=0 ppid=1 pid=7168 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=SYSCALL msg=audit(1345802566.140:742): arch=c000003e syscall=56 success=yes exit=0 a0=6c020011 a1=7f998018d660 a2=8 a3=a7373 items=0 ppid=7168 pid=7244 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=FD_PAIR msg=audit(1345802566.140:742): fd0=0 fd1=0 >type=ANOM_PROMISCUOUS msg=audit(1345802572.018:743): dev=vnet0 prom=0 old_prom=256 auid=0 uid=107 gid=107 ses=1 >type=SYSCALL msg=audit(1345802572.018:743): arch=c000003e syscall=3 success=yes exit=0 a0=16 a1=7fff4f7bbca0 a2=8 a3=1 items=0 ppid=1 pid=6145 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=1 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:svirt_t:s0:c598,c845 key=(null) >type=VIRT_CONTROL msg=audit(1345802572.384:744): user pid=7157 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="testtwo" uuid=10a32ba1-07be-6ca3-0dc3-1f70b023a24c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345802576.592:745): user pid=7157 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345802576.592:746): user pid=7157 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-ctx=? img-ctx=? model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1345802576.592:747): user pid=7157 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-ctx=? img-ctx=? model=none exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345802576.698:748): user pid=7157 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345802576.698:749): user pid=7157 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345802576.698:750): user pid=7157 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345802576.698:751): user pid=7157 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345802576.699:752): user pid=7157 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345802576.699:753): user pid=7157 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345802576.699:754): user pid=7157 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345802576.699:755): user pid=7157 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345802576.699:756): user pid=7157 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345802576.699:757): user pid=7157 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1345802576.699:758): user pid=7157 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345802576.699:759): user pid=7157 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c cgroup="/cgroup/devices/libvirt/qemu/testone/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345802576.760:760): user pid=7157 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-disk="?" new-disk="/var/lib/libvirt/images/testkf10.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345802576.760:761): user pid=7157 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345802576.760:762): user pid=7157 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-mem=0 new-mem=1048576 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1345802576.760:763): user pid=7157 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c old-vcpu=0 new-vcpu=2 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1345802576.760:764): user pid=7157 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=restored vm="testone" uuid=10a32ba1-07ae-6c03-0dc3-1f70b093a24c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=ANOM_ABEND msg=audit(1345802580.506:765): auid=0 uid=0 gid=0 ses=1 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 pid=7160 comm="libvirtd" sig=11 >type=USER_ACCT msg=audit(1345803001.080:766): user pid=7755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345803001.080:767): user pid=7755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345803001.087:768): pid=7755 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=7 >type=USER_START msg=audit(1345803001.094:769): user pid=7755 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345803001.169:770): user pid=7755 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345803001.170:771): user pid=7755 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345803601.184:772): user pid=8424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345803601.184:773): user pid=8424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345803601.184:774): pid=8424 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=8 >type=USER_START msg=audit(1345803601.190:775): user pid=8424 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345803601.255:776): user pid=8424 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345803601.255:777): user pid=8424 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345804201.262:778): user pid=9086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345804201.262:779): user pid=9086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345804201.262:780): pid=9086 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=9 >type=USER_START msg=audit(1345804201.269:781): user pid=9086 uid=0 auid=0 ses=9 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345804201.318:782): user pid=9086 uid=0 auid=0 ses=9 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345804201.318:783): user pid=9086 uid=0 auid=0 ses=9 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345804731.168:784): user pid=2803 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1345804731.168:785): user pid=2803 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1345804731.169:786): user pid=2803 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1345804731.169:787): user pid=2803 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1345804731.170:788): user pid=2803 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=2803 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345804731.170:789): user pid=2803 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=2803 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1345804731.170:790): user pid=2803 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2803 suid=0 rport=48070 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_ACCT msg=audit(1345804801.325:791): user pid=9678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345804801.325:792): user pid=9678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345804801.325:793): pid=9678 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=10 >type=USER_START msg=audit(1345804801.332:794): user pid=9678 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345804801.406:795): user pid=9678 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345804801.406:796): user pid=9678 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345805401.413:797): user pid=9741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345805401.413:798): user pid=9741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345805401.413:799): pid=9741 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=11 >type=USER_START msg=audit(1345805401.420:800): user pid=9741 uid=0 auid=0 ses=11 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345805401.479:801): user pid=9741 uid=0 auid=0 ses=11 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345805401.479:802): user pid=9741 uid=0 auid=0 ses=11 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345806001.485:803): user pid=9804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345806001.485:804): user pid=9804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345806001.486:805): pid=9804 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=12 >type=USER_START msg=audit(1345806001.493:806): user pid=9804 uid=0 auid=0 ses=12 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345806001.531:807): user pid=9804 uid=0 auid=0 ses=12 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345806001.531:808): user pid=9804 uid=0 auid=0 ses=12 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345806061.536:809): user pid=9813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345806061.536:810): user pid=9813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345806061.536:811): pid=9813 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=13 >type=USER_START msg=audit(1345806061.544:812): user pid=9813 uid=0 auid=0 ses=13 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345806061.566:813): user pid=9813 uid=0 auid=0 ses=13 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345806061.566:814): user pid=9813 uid=0 auid=0 ses=13 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345806601.574:815): user pid=9880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345806601.574:816): user pid=9880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345806601.574:817): pid=9880 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=14 >type=USER_START msg=audit(1345806601.580:818): user pid=9880 uid=0 auid=0 ses=14 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345806601.641:819): user pid=9880 uid=0 auid=0 ses=14 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345806601.641:820): user pid=9880 uid=0 auid=0 ses=14 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345807201.648:821): user pid=9943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345807201.648:822): user pid=9943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345807201.648:823): pid=9943 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=15 >type=USER_START msg=audit(1345807201.653:824): user pid=9943 uid=0 auid=0 ses=15 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345807201.690:825): user pid=9943 uid=0 auid=0 ses=15 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345807201.690:826): user pid=9943 uid=0 auid=0 ses=15 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345807801.699:827): user pid=10027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345807801.699:828): user pid=10027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345807801.700:829): pid=10027 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=16 >type=USER_START msg=audit(1345807801.704:830): user pid=10027 uid=0 auid=0 ses=16 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345807801.763:831): user pid=10027 uid=0 auid=0 ses=16 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345807801.763:832): user pid=10027 uid=0 auid=0 ses=16 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345808401.770:833): user pid=10090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345808401.770:834): user pid=10090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345808401.770:835): pid=10090 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=17 >type=USER_START msg=audit(1345808401.775:836): user pid=10090 uid=0 auid=0 ses=17 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345808401.835:837): user pid=10090 uid=0 auid=0 ses=17 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345808401.835:838): user pid=10090 uid=0 auid=0 ses=17 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345809001.842:839): user pid=10153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345809001.842:840): user pid=10153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345809001.842:841): pid=10153 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=18 >type=USER_START msg=audit(1345809001.847:842): user pid=10153 uid=0 auid=0 ses=18 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345809001.891:843): user pid=10153 uid=0 auid=0 ses=18 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345809001.891:844): user pid=10153 uid=0 auid=0 ses=18 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345809601.898:845): user pid=10216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345809601.898:846): user pid=10216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345809601.898:847): pid=10216 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=19 >type=USER_START msg=audit(1345809601.903:848): user pid=10216 uid=0 auid=0 ses=19 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345809601.955:849): user pid=10216 uid=0 auid=0 ses=19 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345809601.955:850): user pid=10216 uid=0 auid=0 ses=19 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345809661.960:851): user pid=10225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345809661.960:852): user pid=10225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345809661.961:853): pid=10225 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=20 >type=USER_START msg=audit(1345809661.966:854): user pid=10225 uid=0 auid=0 ses=20 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345809661.980:855): user pid=10225 uid=0 auid=0 ses=20 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345809661.981:856): user pid=10225 uid=0 auid=0 ses=20 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345810201.987:857): user pid=10291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345810201.987:858): user pid=10291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345810201.988:859): pid=10291 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=21 >type=USER_START msg=audit(1345810201.997:860): user pid=10291 uid=0 auid=0 ses=21 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345810202.054:861): user pid=10291 uid=0 auid=0 ses=21 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345810202.054:862): user pid=10291 uid=0 auid=0 ses=21 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345810801.061:863): user pid=10354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345810801.061:864): user pid=10354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345810801.061:865): pid=10354 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=22 >type=USER_START msg=audit(1345810801.066:866): user pid=10354 uid=0 auid=0 ses=22 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345810801.083:867): user pid=10354 uid=0 auid=0 ses=22 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345810801.083:868): user pid=10354 uid=0 auid=0 ses=22 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345811401.090:869): user pid=10417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345811401.090:870): user pid=10417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345811401.090:871): pid=10417 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=23 >type=USER_START msg=audit(1345811401.095:872): user pid=10417 uid=0 auid=0 ses=23 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345811401.183:873): user pid=10417 uid=0 auid=0 ses=23 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345811401.183:874): user pid=10417 uid=0 auid=0 ses=23 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345812001.189:875): user pid=10480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345812001.189:876): user pid=10480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345812001.190:877): pid=10480 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=24 >type=USER_START msg=audit(1345812001.195:878): user pid=10480 uid=0 auid=0 ses=24 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345812001.239:879): user pid=10480 uid=0 auid=0 ses=24 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345812001.239:880): user pid=10480 uid=0 auid=0 ses=24 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345812601.250:881): user pid=10544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345812601.251:882): user pid=10544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345812601.251:883): pid=10544 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=25 >type=USER_START msg=audit(1345812601.256:884): user pid=10544 uid=0 auid=0 ses=25 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345812601.320:885): user pid=10544 uid=0 auid=0 ses=25 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345812601.320:886): user pid=10544 uid=0 auid=0 ses=25 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345813201.326:887): user pid=10607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345813201.326:888): user pid=10607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345813201.326:889): pid=10607 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=26 >type=USER_START msg=audit(1345813201.332:890): user pid=10607 uid=0 auid=0 ses=26 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345813201.409:891): user pid=10607 uid=0 auid=0 ses=26 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345813201.409:892): user pid=10607 uid=0 auid=0 ses=26 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345813261.413:893): user pid=10616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345813261.414:894): user pid=10616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345813261.414:895): pid=10616 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=27 >type=USER_START msg=audit(1345813261.419:896): user pid=10616 uid=0 auid=0 ses=27 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345813261.430:897): user pid=10616 uid=0 auid=0 ses=27 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345813261.430:898): user pid=10616 uid=0 auid=0 ses=27 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345813801.438:899): user pid=10703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345813801.438:900): user pid=10703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345813801.439:901): pid=10703 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=28 >type=USER_START msg=audit(1345813801.447:902): user pid=10703 uid=0 auid=0 ses=28 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345813801.491:903): user pid=10703 uid=0 auid=0 ses=28 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345813801.491:904): user pid=10703 uid=0 auid=0 ses=28 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345814401.498:905): user pid=10766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345814401.498:906): user pid=10766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345814401.498:907): pid=10766 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=29 >type=USER_START msg=audit(1345814401.503:908): user pid=10766 uid=0 auid=0 ses=29 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345814401.564:909): user pid=10766 uid=0 auid=0 ses=29 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345814401.564:910): user pid=10766 uid=0 auid=0 ses=29 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345815001.573:911): user pid=10830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345815001.574:912): user pid=10830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345815001.574:913): pid=10830 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=30 >type=USER_START msg=audit(1345815001.582:914): user pid=10830 uid=0 auid=0 ses=30 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345815001.645:915): user pid=10830 uid=0 auid=0 ses=30 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345815001.645:916): user pid=10830 uid=0 auid=0 ses=30 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345815601.652:917): user pid=10893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345815601.652:918): user pid=10893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345815601.652:919): pid=10893 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=31 >type=USER_START msg=audit(1345815601.657:920): user pid=10893 uid=0 auid=0 ses=31 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345815601.694:921): user pid=10893 uid=0 auid=0 ses=31 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345815601.694:922): user pid=10893 uid=0 auid=0 ses=31 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345816201.700:923): user pid=10956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345816201.700:924): user pid=10956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345816201.701:925): pid=10956 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=32 >type=USER_START msg=audit(1345816201.706:926): user pid=10956 uid=0 auid=0 ses=32 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345816201.757:927): user pid=10956 uid=0 auid=0 ses=32 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345816201.757:928): user pid=10956 uid=0 auid=0 ses=32 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345816801.763:929): user pid=11019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345816801.763:930): user pid=11019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345816801.764:931): pid=11019 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=33 >type=USER_START msg=audit(1345816801.773:932): user pid=11019 uid=0 auid=0 ses=33 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345816801.794:933): user pid=11019 uid=0 auid=0 ses=33 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345816801.794:934): user pid=11019 uid=0 auid=0 ses=33 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345816861.799:935): user pid=11028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345816861.799:936): user pid=11028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345816861.799:937): pid=11028 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=34 >type=USER_START msg=audit(1345816861.804:938): user pid=11028 uid=0 auid=0 ses=34 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345816861.818:939): user pid=11028 uid=0 auid=0 ses=34 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345816861.818:940): user pid=11028 uid=0 auid=0 ses=34 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345817401.825:941): user pid=11094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345817401.825:942): user pid=11094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345817401.825:943): pid=11094 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=35 >type=USER_START msg=audit(1345817401.830:944): user pid=11094 uid=0 auid=0 ses=35 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345817401.895:945): user pid=11094 uid=0 auid=0 ses=35 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345817401.895:946): user pid=11094 uid=0 auid=0 ses=35 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345818001.901:947): user pid=11157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345818001.901:948): user pid=11157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345818001.902:949): pid=11157 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=36 >type=USER_START msg=audit(1345818001.907:950): user pid=11157 uid=0 auid=0 ses=36 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345818001.959:951): user pid=11157 uid=0 auid=0 ses=36 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345818001.959:952): user pid=11157 uid=0 auid=0 ses=36 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345818601.966:953): user pid=11221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345818601.966:954): user pid=11221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345818601.966:955): pid=11221 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=37 >type=USER_START msg=audit(1345818601.971:956): user pid=11221 uid=0 auid=0 ses=37 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345818601.999:957): user pid=11221 uid=0 auid=0 ses=37 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345818601.999:958): user pid=11221 uid=0 auid=0 ses=37 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345819201.006:959): user pid=11284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345819201.006:960): user pid=11284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345819201.006:961): pid=11284 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=38 >type=USER_START msg=audit(1345819201.011:962): user pid=11284 uid=0 auid=0 ses=38 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345819201.079:963): user pid=11284 uid=0 auid=0 ses=38 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345819201.079:964): user pid=11284 uid=0 auid=0 ses=38 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345819801.085:965): user pid=11347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345819801.085:966): user pid=11347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345819801.086:967): pid=11347 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=39 >type=USER_START msg=audit(1345819801.091:968): user pid=11347 uid=0 auid=0 ses=39 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345819801.116:969): user pid=11347 uid=0 auid=0 ses=39 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345819801.116:970): user pid=11347 uid=0 auid=0 ses=39 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345820401.123:971): user pid=11431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345820401.123:972): user pid=11431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345820401.124:973): pid=11431 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=40 >type=USER_START msg=audit(1345820401.129:974): user pid=11431 uid=0 auid=0 ses=40 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345820401.183:975): user pid=11431 uid=0 auid=0 ses=40 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345820401.183:976): user pid=11431 uid=0 auid=0 ses=40 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345820461.188:977): user pid=11440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345820461.188:978): user pid=11440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345820461.189:979): pid=11440 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=41 >type=USER_START msg=audit(1345820461.194:980): user pid=11440 uid=0 auid=0 ses=41 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345820461.205:981): user pid=11440 uid=0 auid=0 ses=41 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345820461.205:982): user pid=11440 uid=0 auid=0 ses=41 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345821001.212:983): user pid=11506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345821001.212:984): user pid=11506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345821001.212:985): pid=11506 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=42 >type=USER_START msg=audit(1345821001.217:986): user pid=11506 uid=0 auid=0 ses=42 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345821001.281:987): user pid=11506 uid=0 auid=0 ses=42 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345821001.281:988): user pid=11506 uid=0 auid=0 ses=42 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345821601.288:989): user pid=11569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345821601.288:990): user pid=11569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345821601.288:991): pid=11569 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=43 >type=USER_START msg=audit(1345821601.293:992): user pid=11569 uid=0 auid=0 ses=43 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345821601.321:993): user pid=11569 uid=0 auid=0 ses=43 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345821601.321:994): user pid=11569 uid=0 auid=0 ses=43 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345822201.328:995): user pid=11632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345822201.328:996): user pid=11632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345822201.328:997): pid=11632 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=44 >type=USER_START msg=audit(1345822201.333:998): user pid=11632 uid=0 auid=0 ses=44 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345822201.393:999): user pid=11632 uid=0 auid=0 ses=44 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345822201.393:1000): user pid=11632 uid=0 auid=0 ses=44 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345822801.399:1001): user pid=11695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345822801.399:1002): user pid=11695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345822801.400:1003): pid=11695 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=45 >type=USER_START msg=audit(1345822801.405:1004): user pid=11695 uid=0 auid=0 ses=45 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345822801.482:1005): user pid=11695 uid=0 auid=0 ses=45 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345822801.482:1006): user pid=11695 uid=0 auid=0 ses=45 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345823401.488:1007): user pid=11758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345823401.489:1008): user pid=11758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345823401.489:1009): pid=11758 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=46 >type=USER_START msg=audit(1345823401.498:1010): user pid=11758 uid=0 auid=0 ses=46 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345823401.526:1011): user pid=11758 uid=0 auid=0 ses=46 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345823401.526:1012): user pid=11758 uid=0 auid=0 ses=46 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345823581.531:1013): user pid=11779 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345823581.532:1014): user pid=11779 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345823581.532:1015): pid=11779 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=47 >type=USER_START msg=audit(1345823581.537:1016): user pid=11779 uid=0 auid=0 ses=47 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345823581.646:1017): user pid=11779 uid=0 auid=0 ses=47 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345823581.646:1018): user pid=11779 uid=0 auid=0 ses=47 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345824001.652:1019): user pid=11830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345824001.652:1020): user pid=11830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345824001.652:1021): pid=11830 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=48 >type=USER_START msg=audit(1345824001.660:1022): user pid=11830 uid=0 auid=0 ses=48 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345824001.721:1023): user pid=11830 uid=0 auid=0 ses=48 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345824001.721:1024): user pid=11830 uid=0 auid=0 ses=48 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345824061.725:1025): user pid=11839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345824061.725:1026): user pid=11839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345824061.726:1027): pid=11839 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=49 >type=USER_START msg=audit(1345824061.733:1028): user pid=11839 uid=0 auid=0 ses=49 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345824061.814:1029): user pid=11839 uid=0 auid=0 ses=49 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345824061.814:1030): user pid=11839 uid=0 auid=0 ses=49 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345824601.822:1031): user pid=11910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345824601.822:1032): user pid=11910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345824601.822:1033): pid=11910 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=50 >type=USER_START msg=audit(1345824601.828:1034): user pid=11910 uid=0 auid=0 ses=50 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345824601.885:1035): user pid=11910 uid=0 auid=0 ses=50 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345824601.885:1036): user pid=11910 uid=0 auid=0 ses=50 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345825201.892:1037): user pid=11973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345825201.892:1038): user pid=11973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345825201.892:1039): pid=11973 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=51 >type=USER_START msg=audit(1345825201.899:1040): user pid=11973 uid=0 auid=0 ses=51 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345825201.917:1041): user pid=11973 uid=0 auid=0 ses=51 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345825201.917:1042): user pid=11973 uid=0 auid=0 ses=51 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345825801.923:1043): user pid=12036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345825801.924:1044): user pid=12036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345825801.924:1045): pid=12036 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=52 >type=USER_START msg=audit(1345825801.931:1046): user pid=12036 uid=0 auid=0 ses=52 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345825801.980:1047): user pid=12036 uid=0 auid=0 ses=52 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345825801.980:1048): user pid=12036 uid=0 auid=0 ses=52 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345826401.986:1049): user pid=12099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345826401.986:1050): user pid=12099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345826401.987:1051): pid=12099 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=53 >type=USER_START msg=audit(1345826401.994:1052): user pid=12099 uid=0 auid=0 ses=53 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345826402.044:1053): user pid=12099 uid=0 auid=0 ses=53 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345826402.044:1054): user pid=12099 uid=0 auid=0 ses=53 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345827001.051:1055): user pid=12162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345827001.051:1056): user pid=12162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345827001.051:1057): pid=12162 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=54 >type=USER_START msg=audit(1345827001.058:1058): user pid=12162 uid=0 auid=0 ses=54 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345827001.080:1059): user pid=12162 uid=0 auid=0 ses=54 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345827001.080:1060): user pid=12162 uid=0 auid=0 ses=54 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345827601.086:1061): user pid=12246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345827601.086:1062): user pid=12246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345827601.087:1063): pid=12246 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=55 >type=USER_START msg=audit(1345827601.094:1064): user pid=12246 uid=0 auid=0 ses=55 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345827601.157:1065): user pid=12246 uid=0 auid=0 ses=55 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345827601.157:1066): user pid=12246 uid=0 auid=0 ses=55 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345827661.162:1067): user pid=12255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345827661.162:1068): user pid=12255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345827661.162:1069): pid=12255 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=56 >type=USER_START msg=audit(1345827661.170:1070): user pid=12255 uid=0 auid=0 ses=56 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345827661.187:1071): user pid=12255 uid=0 auid=0 ses=56 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345827661.187:1072): user pid=12255 uid=0 auid=0 ses=56 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345828201.194:1073): user pid=12325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345828201.194:1074): user pid=12325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345828201.194:1075): pid=12325 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=57 >type=USER_START msg=audit(1345828201.202:1076): user pid=12325 uid=0 auid=0 ses=57 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345828201.255:1077): user pid=12325 uid=0 auid=0 ses=57 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345828201.255:1078): user pid=12325 uid=0 auid=0 ses=57 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345828801.262:1079): user pid=12388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345828801.262:1080): user pid=12388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345828801.262:1081): pid=12388 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=58 >type=USER_START msg=audit(1345828801.269:1082): user pid=12388 uid=0 auid=0 ses=58 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345828801.311:1083): user pid=12388 uid=0 auid=0 ses=58 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345828801.311:1084): user pid=12388 uid=0 auid=0 ses=58 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345829401.317:1085): user pid=12452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345829401.318:1086): user pid=12452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345829401.318:1087): pid=12452 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=59 >type=USER_START msg=audit(1345829401.325:1088): user pid=12452 uid=0 auid=0 ses=59 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345829401.384:1089): user pid=12452 uid=0 auid=0 ses=59 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345829401.384:1090): user pid=12452 uid=0 auid=0 ses=59 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345830001.390:1091): user pid=12515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345830001.390:1092): user pid=12515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345830001.390:1093): pid=12515 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=60 >type=USER_START msg=audit(1345830001.398:1094): user pid=12515 uid=0 auid=0 ses=60 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345830001.419:1095): user pid=12515 uid=0 auid=0 ses=60 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345830001.419:1096): user pid=12515 uid=0 auid=0 ses=60 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345830601.426:1097): user pid=12579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345830601.426:1098): user pid=12579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345830601.426:1099): pid=12579 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=61 >type=USER_START msg=audit(1345830601.433:1100): user pid=12579 uid=0 auid=0 ses=61 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345830601.488:1101): user pid=12579 uid=0 auid=0 ses=61 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345830601.488:1102): user pid=12579 uid=0 auid=0 ses=61 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345831201.495:1103): user pid=12642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345831201.495:1104): user pid=12642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345831201.495:1105): pid=12642 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=62 >type=USER_START msg=audit(1345831201.502:1106): user pid=12642 uid=0 auid=0 ses=62 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345831201.561:1107): user pid=12642 uid=0 auid=0 ses=62 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345831201.561:1108): user pid=12642 uid=0 auid=0 ses=62 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345831261.565:1109): user pid=12651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345831261.566:1110): user pid=12651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345831261.566:1111): pid=12651 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=63 >type=USER_START msg=audit(1345831261.573:1112): user pid=12651 uid=0 auid=0 ses=63 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345831261.590:1113): user pid=12651 uid=0 auid=0 ses=63 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345831261.590:1114): user pid=12651 uid=0 auid=0 ses=63 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345831801.596:1115): user pid=12721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345831801.596:1116): user pid=12721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345831801.597:1117): pid=12721 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=64 >type=USER_START msg=audit(1345831801.602:1118): user pid=12721 uid=0 auid=0 ses=64 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345831801.624:1119): user pid=12721 uid=0 auid=0 ses=64 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345831801.624:1120): user pid=12721 uid=0 auid=0 ses=64 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345832401.631:1121): user pid=12784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345832401.631:1122): user pid=12784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345832401.631:1123): pid=12784 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=65 >type=USER_START msg=audit(1345832401.636:1124): user pid=12784 uid=0 auid=0 ses=65 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345832401.714:1125): user pid=12784 uid=0 auid=0 ses=65 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345832401.714:1126): user pid=12784 uid=0 auid=0 ses=65 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345833001.721:1127): user pid=12847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345833001.721:1128): user pid=12847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345833001.721:1129): pid=12847 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=66 >type=USER_START msg=audit(1345833001.726:1130): user pid=12847 uid=0 auid=0 ses=66 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345833001.780:1131): user pid=12847 uid=0 auid=0 ses=66 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345833001.780:1132): user pid=12847 uid=0 auid=0 ses=66 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345833601.786:1133): user pid=12910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345833601.786:1134): user pid=12910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345833601.787:1135): pid=12910 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=67 >type=USER_START msg=audit(1345833601.792:1136): user pid=12910 uid=0 auid=0 ses=67 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345833601.821:1137): user pid=12910 uid=0 auid=0 ses=67 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345833601.821:1138): user pid=12910 uid=0 auid=0 ses=67 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345834201.827:1139): user pid=12994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345834201.827:1140): user pid=12994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345834201.828:1141): pid=12994 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=68 >type=USER_START msg=audit(1345834201.833:1142): user pid=12994 uid=0 auid=0 ses=68 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345834201.909:1143): user pid=12994 uid=0 auid=0 ses=68 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345834201.909:1144): user pid=12994 uid=0 auid=0 ses=68 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345834801.915:1145): user pid=13057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345834801.915:1146): user pid=13057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345834801.916:1147): pid=13057 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=69 >type=USER_START msg=audit(1345834801.921:1148): user pid=13057 uid=0 auid=0 ses=69 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345834801.938:1149): user pid=13057 uid=0 auid=0 ses=69 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345834801.938:1150): user pid=13057 uid=0 auid=0 ses=69 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345834861.943:1151): user pid=13066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345834861.943:1152): user pid=13066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345834861.944:1153): pid=13066 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=70 >type=USER_START msg=audit(1345834861.949:1154): user pid=13066 uid=0 auid=0 ses=70 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345834861.965:1155): user pid=13066 uid=0 auid=0 ses=70 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345834861.966:1156): user pid=13066 uid=0 auid=0 ses=70 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345835401.972:1157): user pid=13136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345835401.972:1158): user pid=13136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345835401.973:1159): pid=13136 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=71 >type=USER_START msg=audit(1345835401.980:1160): user pid=13136 uid=0 auid=0 ses=71 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345835402.029:1161): user pid=13136 uid=0 auid=0 ses=71 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345835402.029:1162): user pid=13136 uid=0 auid=0 ses=71 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345836001.035:1163): user pid=13199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345836001.036:1164): user pid=13199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345836001.036:1165): pid=13199 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=72 >type=USER_START msg=audit(1345836001.047:1166): user pid=13199 uid=0 auid=0 ses=72 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345836001.085:1167): user pid=13199 uid=0 auid=0 ses=72 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345836001.085:1168): user pid=13199 uid=0 auid=0 ses=72 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345836601.111:1169): user pid=13761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345836601.112:1170): user pid=13761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345836601.118:1171): pid=13761 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=73 >type=USER_START msg=audit(1345836601.125:1172): user pid=13761 uid=0 auid=0 ses=73 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345836601.168:1173): user pid=13761 uid=0 auid=0 ses=73 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345836601.169:1174): user pid=13761 uid=0 auid=0 ses=73 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345837201.176:1175): user pid=13824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345837201.176:1176): user pid=13824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345837201.176:1177): pid=13824 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=74 >type=USER_START msg=audit(1345837201.183:1178): user pid=13824 uid=0 auid=0 ses=74 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345837201.247:1179): user pid=13824 uid=0 auid=0 ses=74 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345837201.247:1180): user pid=13824 uid=0 auid=0 ses=74 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345837801.254:1181): user pid=13887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345837801.254:1182): user pid=13887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345837801.254:1183): pid=13887 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=75 >type=USER_START msg=audit(1345837801.261:1184): user pid=13887 uid=0 auid=0 ses=75 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345837801.329:1185): user pid=13887 uid=0 auid=0 ses=75 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345837801.329:1186): user pid=13887 uid=0 auid=0 ses=75 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345838401.336:1187): user pid=13950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345838401.336:1188): user pid=13950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345838401.336:1189): pid=13950 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=76 >type=USER_START msg=audit(1345838401.343:1190): user pid=13950 uid=0 auid=0 ses=76 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345838401.373:1191): user pid=13950 uid=0 auid=0 ses=76 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345838401.373:1192): user pid=13950 uid=0 auid=0 ses=76 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345838461.378:1193): user pid=13959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345838461.378:1194): user pid=13959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345838461.378:1195): pid=13959 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=77 >type=USER_START msg=audit(1345838461.386:1196): user pid=13959 uid=0 auid=0 ses=77 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345838461.399:1197): user pid=13959 uid=0 auid=0 ses=77 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345838461.399:1198): user pid=13959 uid=0 auid=0 ses=77 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345839001.406:1199): user pid=14025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345839001.406:1200): user pid=14025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345839001.406:1201): pid=14025 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=78 >type=USER_START msg=audit(1345839001.414:1202): user pid=14025 uid=0 auid=0 ses=78 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345839001.500:1203): user pid=14025 uid=0 auid=0 ses=78 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345839001.500:1204): user pid=14025 uid=0 auid=0 ses=78 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345839601.506:1205): user pid=14088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345839601.506:1206): user pid=14088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345839601.506:1207): pid=14088 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=79 >type=USER_START msg=audit(1345839601.514:1208): user pid=14088 uid=0 auid=0 ses=79 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345839601.544:1209): user pid=14088 uid=0 auid=0 ses=79 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345839601.544:1210): user pid=14088 uid=0 auid=0 ses=79 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345840201.550:1211): user pid=14151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345840201.550:1212): user pid=14151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345840201.551:1213): pid=14151 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=80 >type=USER_START msg=audit(1345840201.558:1214): user pid=14151 uid=0 auid=0 ses=80 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345840201.628:1215): user pid=14151 uid=0 auid=0 ses=80 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345840201.628:1216): user pid=14151 uid=0 auid=0 ses=80 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345840801.636:1217): user pid=14235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345840801.636:1218): user pid=14235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345840801.637:1219): pid=14235 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=81 >type=USER_START msg=audit(1345840801.642:1220): user pid=14235 uid=0 auid=0 ses=81 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345840801.717:1221): user pid=14235 uid=0 auid=0 ses=81 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345840801.717:1222): user pid=14235 uid=0 auid=0 ses=81 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345841401.724:1223): user pid=14298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345841401.724:1224): user pid=14298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345841401.725:1225): pid=14298 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=82 >type=USER_START msg=audit(1345841401.731:1226): user pid=14298 uid=0 auid=0 ses=82 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345841401.757:1227): user pid=14298 uid=0 auid=0 ses=82 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345841401.757:1228): user pid=14298 uid=0 auid=0 ses=82 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345842001.764:1229): user pid=14361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345842001.764:1230): user pid=14361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345842001.764:1231): pid=14361 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=83 >type=USER_START msg=audit(1345842001.772:1232): user pid=14361 uid=0 auid=0 ses=83 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345842001.839:1233): user pid=14361 uid=0 auid=0 ses=83 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345842001.839:1234): user pid=14361 uid=0 auid=0 ses=83 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345842061.843:1235): user pid=14370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345842061.843:1236): user pid=14370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345842061.844:1237): pid=14370 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=84 >type=USER_START msg=audit(1345842061.851:1238): user pid=14370 uid=0 auid=0 ses=84 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345842061.864:1239): user pid=14370 uid=0 auid=0 ses=84 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345842061.865:1240): user pid=14370 uid=0 auid=0 ses=84 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345842601.872:1241): user pid=14437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345842601.872:1242): user pid=14437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345842601.872:1243): pid=14437 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=85 >type=USER_START msg=audit(1345842601.877:1244): user pid=14437 uid=0 auid=0 ses=85 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345842601.953:1245): user pid=14437 uid=0 auid=0 ses=85 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345842601.953:1246): user pid=14437 uid=0 auid=0 ses=85 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345843201.960:1247): user pid=14500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345843201.960:1248): user pid=14500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345843201.960:1249): pid=14500 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=86 >type=USER_START msg=audit(1345843201.965:1250): user pid=14500 uid=0 auid=0 ses=86 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345843201.979:1251): user pid=14500 uid=0 auid=0 ses=86 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345843201.979:1252): user pid=14500 uid=0 auid=0 ses=86 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345843801.991:1253): user pid=14564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345843801.991:1254): user pid=14564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345843801.991:1255): pid=14564 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=87 >type=USER_START msg=audit(1345843801.998:1256): user pid=14564 uid=0 auid=0 ses=87 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345843802.057:1257): user pid=14564 uid=0 auid=0 ses=87 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345843802.057:1258): user pid=14564 uid=0 auid=0 ses=87 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345844401.063:1259): user pid=14627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345844401.063:1260): user pid=14627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345844401.064:1261): pid=14627 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=88 >type=USER_START msg=audit(1345844401.069:1262): user pid=14627 uid=0 auid=0 ses=88 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345844401.105:1263): user pid=14627 uid=0 auid=0 ses=88 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345844401.105:1264): user pid=14627 uid=0 auid=0 ses=88 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345845001.111:1265): user pid=14690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345845001.111:1266): user pid=14690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345845001.112:1267): pid=14690 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=89 >type=USER_START msg=audit(1345845001.117:1268): user pid=14690 uid=0 auid=0 ses=89 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345845001.178:1269): user pid=14690 uid=0 auid=0 ses=89 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345845001.178:1270): user pid=14690 uid=0 auid=0 ses=89 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345845601.184:1271): user pid=14753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345845601.185:1272): user pid=14753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345845601.185:1273): pid=14753 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=90 >type=USER_START msg=audit(1345845601.190:1274): user pid=14753 uid=0 auid=0 ses=90 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345845601.242:1275): user pid=14753 uid=0 auid=0 ses=90 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345845601.242:1276): user pid=14753 uid=0 auid=0 ses=90 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345845661.247:1277): user pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345845661.247:1278): user pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345845661.247:1279): pid=14762 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=91 >type=USER_START msg=audit(1345845661.252:1280): user pid=14762 uid=0 auid=0 ses=91 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345845661.264:1281): user pid=14762 uid=0 auid=0 ses=91 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345845661.264:1282): user pid=14762 uid=0 auid=0 ses=91 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345846201.271:1283): user pid=14828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345846201.271:1284): user pid=14828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345846201.272:1285): pid=14828 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=92 >type=USER_START msg=audit(1345846201.281:1286): user pid=14828 uid=0 auid=0 ses=92 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345846201.309:1287): user pid=14828 uid=0 auid=0 ses=92 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345846201.309:1288): user pid=14828 uid=0 auid=0 ses=92 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345846801.316:1289): user pid=14891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345846801.316:1290): user pid=14891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345846801.316:1291): pid=14891 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=93 >type=USER_START msg=audit(1345846801.322:1292): user pid=14891 uid=0 auid=0 ses=93 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345846801.379:1293): user pid=14891 uid=0 auid=0 ses=93 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345846801.379:1294): user pid=14891 uid=0 auid=0 ses=93 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345847401.386:1295): user pid=14954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345847401.386:1296): user pid=14954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345847401.386:1297): pid=14954 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=94 >type=USER_START msg=audit(1345847401.391:1298): user pid=14954 uid=0 auid=0 ses=94 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345847401.410:1299): user pid=14954 uid=0 auid=0 ses=94 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345847401.410:1300): user pid=14954 uid=0 auid=0 ses=94 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345848001.418:1301): user pid=15038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345848001.418:1302): user pid=15038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345848001.418:1303): pid=15038 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=95 >type=USER_START msg=audit(1345848001.423:1304): user pid=15038 uid=0 auid=0 ses=95 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345848001.492:1305): user pid=15038 uid=0 auid=0 ses=95 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345848001.492:1306): user pid=15038 uid=0 auid=0 ses=95 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345848601.499:1307): user pid=15102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345848601.499:1308): user pid=15102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345848601.500:1309): pid=15102 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=96 >type=USER_START msg=audit(1345848601.508:1310): user pid=15102 uid=0 auid=0 ses=96 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345848601.565:1311): user pid=15102 uid=0 auid=0 ses=96 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345848601.565:1312): user pid=15102 uid=0 auid=0 ses=96 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345849201.571:1313): user pid=15165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345849201.572:1314): user pid=15165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345849201.572:1315): pid=15165 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=97 >type=USER_START msg=audit(1345849201.577:1316): user pid=15165 uid=0 auid=0 ses=97 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345849201.590:1317): user pid=15165 uid=0 auid=0 ses=97 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345849201.590:1318): user pid=15165 uid=0 auid=0 ses=97 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345849261.595:1319): user pid=15174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345849261.595:1320): user pid=15174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345849261.596:1321): pid=15174 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=98 >type=USER_START msg=audit(1345849261.600:1322): user pid=15174 uid=0 auid=0 ses=98 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345849261.614:1323): user pid=15174 uid=0 auid=0 ses=98 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345849261.614:1324): user pid=15174 uid=0 auid=0 ses=98 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345849801.621:1325): user pid=15240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345849801.621:1326): user pid=15240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345849801.621:1327): pid=15240 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=99 >type=USER_START msg=audit(1345849801.626:1328): user pid=15240 uid=0 auid=0 ses=99 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345849801.685:1329): user pid=15240 uid=0 auid=0 ses=99 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345849801.685:1330): user pid=15240 uid=0 auid=0 ses=99 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345850401.692:1331): user pid=15303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345850401.692:1332): user pid=15303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345850401.692:1333): pid=15303 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=100 >type=USER_START msg=audit(1345850401.697:1334): user pid=15303 uid=0 auid=0 ses=100 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345850401.741:1335): user pid=15303 uid=0 auid=0 ses=100 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345850401.741:1336): user pid=15303 uid=0 auid=0 ses=100 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345851001.748:1337): user pid=15366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345851001.748:1338): user pid=15366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345851001.748:1339): pid=15366 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=101 >type=USER_START msg=audit(1345851001.753:1340): user pid=15366 uid=0 auid=0 ses=101 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345851001.770:1341): user pid=15366 uid=0 auid=0 ses=101 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345851001.770:1342): user pid=15366 uid=0 auid=0 ses=101 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345851601.776:1343): user pid=15429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345851601.777:1344): user pid=15429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345851601.777:1345): pid=15429 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=102 >type=USER_START msg=audit(1345851601.782:1346): user pid=15429 uid=0 auid=0 ses=102 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345851601.838:1347): user pid=15429 uid=0 auid=0 ses=102 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345851601.838:1348): user pid=15429 uid=0 auid=0 ses=102 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345852201.844:1349): user pid=15492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345852201.844:1350): user pid=15492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345852201.845:1351): pid=15492 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=103 >type=USER_START msg=audit(1345852201.850:1352): user pid=15492 uid=0 auid=0 ses=103 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345852201.871:1353): user pid=15492 uid=0 auid=0 ses=103 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345852201.871:1354): user pid=15492 uid=0 auid=0 ses=103 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345852801.877:1355): user pid=15555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345852801.878:1356): user pid=15555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345852801.878:1357): pid=15555 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=104 >type=USER_START msg=audit(1345852801.883:1358): user pid=15555 uid=0 auid=0 ses=104 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345852801.958:1359): user pid=15555 uid=0 auid=0 ses=104 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345852801.958:1360): user pid=15555 uid=0 auid=0 ses=104 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345852861.963:1361): user pid=15564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345852861.963:1362): user pid=15564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345852861.963:1363): pid=15564 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=105 >type=USER_START msg=audit(1345852861.972:1364): user pid=15564 uid=0 auid=0 ses=105 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345852861.983:1365): user pid=15564 uid=0 auid=0 ses=105 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345852861.983:1366): user pid=15564 uid=0 auid=0 ses=105 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345853401.990:1367): user pid=15630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345853401.990:1368): user pid=15630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345853401.990:1369): pid=15630 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=106 >type=USER_START msg=audit(1345853401.995:1370): user pid=15630 uid=0 auid=0 ses=106 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345853402.048:1371): user pid=15630 uid=0 auid=0 ses=106 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345853402.048:1372): user pid=15630 uid=0 auid=0 ses=106 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345854001.054:1373): user pid=15693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345854001.054:1374): user pid=15693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345854001.054:1375): pid=15693 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=107 >type=USER_START msg=audit(1345854001.059:1376): user pid=15693 uid=0 auid=0 ses=107 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345854001.084:1377): user pid=15693 uid=0 auid=0 ses=107 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345854001.084:1378): user pid=15693 uid=0 auid=0 ses=107 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345854601.091:1379): user pid=15757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345854601.091:1380): user pid=15757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345854601.091:1381): pid=15757 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=108 >type=USER_START msg=audit(1345854601.096:1382): user pid=15757 uid=0 auid=0 ses=108 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345854601.186:1383): user pid=15757 uid=0 auid=0 ses=108 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345854601.186:1384): user pid=15757 uid=0 auid=0 ses=108 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345855201.192:1385): user pid=15841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345855201.192:1386): user pid=15841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345855201.192:1387): pid=15841 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=109 >type=USER_START msg=audit(1345855201.197:1388): user pid=15841 uid=0 auid=0 ses=109 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345855201.250:1389): user pid=15841 uid=0 auid=0 ses=109 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345855201.250:1390): user pid=15841 uid=0 auid=0 ses=109 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345855801.256:1391): user pid=15904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345855801.256:1392): user pid=15904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345855801.257:1393): pid=15904 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=110 >type=USER_START msg=audit(1345855801.262:1394): user pid=15904 uid=0 auid=0 ses=110 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345855801.283:1395): user pid=15904 uid=0 auid=0 ses=110 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345855801.283:1396): user pid=15904 uid=0 auid=0 ses=110 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345856401.289:1397): user pid=15967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345856401.290:1398): user pid=15967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345856401.290:1399): pid=15967 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=111 >type=USER_START msg=audit(1345856401.295:1400): user pid=15967 uid=0 auid=0 ses=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345856401.345:1401): user pid=15967 uid=0 auid=0 ses=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345856401.345:1402): user pid=15967 uid=0 auid=0 ses=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345856461.349:1403): user pid=15976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345856461.350:1404): user pid=15976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345856461.350:1405): pid=15976 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=112 >type=USER_START msg=audit(1345856461.355:1406): user pid=15976 uid=0 auid=0 ses=112 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345856461.366:1407): user pid=15976 uid=0 auid=0 ses=112 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345856461.366:1408): user pid=15976 uid=0 auid=0 ses=112 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345857001.373:1409): user pid=16042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345857001.373:1410): user pid=16042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345857001.373:1411): pid=16042 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=113 >type=USER_START msg=audit(1345857001.378:1412): user pid=16042 uid=0 auid=0 ses=113 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345857001.409:1413): user pid=16042 uid=0 auid=0 ses=113 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345857001.409:1414): user pid=16042 uid=0 auid=0 ses=113 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345857601.415:1415): user pid=16105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345857601.415:1416): user pid=16105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345857601.416:1417): pid=16105 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=114 >type=USER_START msg=audit(1345857601.425:1418): user pid=16105 uid=0 auid=0 ses=114 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345857601.483:1419): user pid=16105 uid=0 auid=0 ses=114 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345857601.483:1420): user pid=16105 uid=0 auid=0 ses=114 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345858201.490:1421): user pid=16169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345858201.490:1422): user pid=16169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345858201.490:1423): pid=16169 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=115 >type=USER_START msg=audit(1345858201.495:1424): user pid=16169 uid=0 auid=0 ses=115 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345858201.564:1425): user pid=16169 uid=0 auid=0 ses=115 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345858201.564:1426): user pid=16169 uid=0 auid=0 ses=115 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345858801.571:1427): user pid=16232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345858801.571:1428): user pid=16232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345858801.571:1429): pid=16232 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=116 >type=USER_START msg=audit(1345858801.576:1430): user pid=16232 uid=0 auid=0 ses=116 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345858801.605:1431): user pid=16232 uid=0 auid=0 ses=116 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345858801.605:1432): user pid=16232 uid=0 auid=0 ses=116 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345859401.612:1433): user pid=16295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345859401.612:1434): user pid=16295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345859401.612:1435): pid=16295 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=117 >type=USER_START msg=audit(1345859401.617:1436): user pid=16295 uid=0 auid=0 ses=117 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345859401.676:1437): user pid=16295 uid=0 auid=0 ses=117 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345859401.676:1438): user pid=16295 uid=0 auid=0 ses=117 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345860001.683:1439): user pid=16358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345860001.683:1440): user pid=16358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345860001.683:1441): pid=16358 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=118 >type=USER_START msg=audit(1345860001.692:1442): user pid=16358 uid=0 auid=0 ses=118 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345860001.757:1443): user pid=16358 uid=0 auid=0 ses=118 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345860001.757:1444): user pid=16358 uid=0 auid=0 ses=118 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345860061.762:1445): user pid=16367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345860061.762:1446): user pid=16367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345860061.762:1447): pid=16367 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=119 >type=USER_START msg=audit(1345860061.767:1448): user pid=16367 uid=0 auid=0 ses=119 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345860061.778:1449): user pid=16367 uid=0 auid=0 ses=119 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345860061.778:1450): user pid=16367 uid=0 auid=0 ses=119 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345860601.785:1451): user pid=16434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345860601.785:1452): user pid=16434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345860601.785:1453): pid=16434 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=120 >type=USER_START msg=audit(1345860601.790:1454): user pid=16434 uid=0 auid=0 ses=120 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345860601.802:1455): user pid=16434 uid=0 auid=0 ses=120 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345860601.802:1456): user pid=16434 uid=0 auid=0 ses=120 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345861201.808:1457): user pid=16497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345861201.809:1458): user pid=16497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345861201.809:1459): pid=16497 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=121 >type=USER_START msg=audit(1345861201.818:1460): user pid=16497 uid=0 auid=0 ses=121 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345861201.870:1461): user pid=16497 uid=0 auid=0 ses=121 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345861201.870:1462): user pid=16497 uid=0 auid=0 ses=121 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345861801.876:1463): user pid=16581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345861801.877:1464): user pid=16581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345861801.877:1465): pid=16581 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=122 >type=USER_START msg=audit(1345861801.886:1466): user pid=16581 uid=0 auid=0 ses=122 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345861801.902:1467): user pid=16581 uid=0 auid=0 ses=122 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345861801.902:1468): user pid=16581 uid=0 auid=0 ses=122 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345862401.909:1469): user pid=16644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345862401.909:1470): user pid=16644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345862401.910:1471): pid=16644 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=123 >type=USER_START msg=audit(1345862401.919:1472): user pid=16644 uid=0 auid=0 ses=123 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345862401.965:1473): user pid=16644 uid=0 auid=0 ses=123 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345862401.965:1474): user pid=16644 uid=0 auid=0 ses=123 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345863001.972:1475): user pid=16707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345863001.972:1476): user pid=16707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345863001.972:1477): pid=16707 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=124 >type=USER_START msg=audit(1345863001.977:1478): user pid=16707 uid=0 auid=0 ses=124 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345863002.030:1479): user pid=16707 uid=0 auid=0 ses=124 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345863002.030:1480): user pid=16707 uid=0 auid=0 ses=124 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345863601.036:1481): user pid=16770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345863601.036:1482): user pid=16770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345863601.036:1483): pid=16770 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=125 >type=USER_START msg=audit(1345863601.042:1484): user pid=16770 uid=0 auid=0 ses=125 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345863601.102:1485): user pid=16770 uid=0 auid=0 ses=125 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345863601.102:1486): user pid=16770 uid=0 auid=0 ses=125 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345863661.107:1487): user pid=16779 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345863661.107:1488): user pid=16779 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345863661.107:1489): pid=16779 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=126 >type=USER_START msg=audit(1345863661.112:1490): user pid=16779 uid=0 auid=0 ses=126 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345863661.123:1491): user pid=16779 uid=0 auid=0 ses=126 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345863661.123:1492): user pid=16779 uid=0 auid=0 ses=126 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345864201.130:1493): user pid=16845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345864201.130:1494): user pid=16845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345864201.130:1495): pid=16845 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=127 >type=USER_START msg=audit(1345864201.139:1496): user pid=16845 uid=0 auid=0 ses=127 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345864201.193:1497): user pid=16845 uid=0 auid=0 ses=127 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345864201.193:1498): user pid=16845 uid=0 auid=0 ses=127 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345864801.199:1499): user pid=16908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345864801.200:1500): user pid=16908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345864801.200:1501): pid=16908 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=128 >type=USER_START msg=audit(1345864801.209:1502): user pid=16908 uid=0 auid=0 ses=128 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345864801.274:1503): user pid=16908 uid=0 auid=0 ses=128 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345864801.274:1504): user pid=16908 uid=0 auid=0 ses=128 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345865401.280:1505): user pid=16971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345865401.281:1506): user pid=16971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345865401.281:1507): pid=16971 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=129 >type=USER_START msg=audit(1345865401.286:1508): user pid=16971 uid=0 auid=0 ses=129 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345865401.312:1509): user pid=16971 uid=0 auid=0 ses=129 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345865401.313:1510): user pid=16971 uid=0 auid=0 ses=129 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345866001.319:1511): user pid=17034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345866001.319:1512): user pid=17034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345866001.320:1513): pid=17034 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=130 >type=USER_START msg=audit(1345866001.325:1514): user pid=17034 uid=0 auid=0 ses=130 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345866001.377:1515): user pid=17034 uid=0 auid=0 ses=130 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345866001.377:1516): user pid=17034 uid=0 auid=0 ses=130 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345866601.384:1517): user pid=17098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345866601.384:1518): user pid=17098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345866601.384:1519): pid=17098 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=131 >type=USER_START msg=audit(1345866601.389:1520): user pid=17098 uid=0 auid=0 ses=131 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345866601.422:1521): user pid=17098 uid=0 auid=0 ses=131 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345866601.422:1522): user pid=17098 uid=0 auid=0 ses=131 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345867201.428:1523): user pid=17161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345867201.428:1524): user pid=17161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345867201.429:1525): pid=17161 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=132 >type=USER_START msg=audit(1345867201.434:1526): user pid=17161 uid=0 auid=0 ses=132 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345867201.497:1527): user pid=17161 uid=0 auid=0 ses=132 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345867201.497:1528): user pid=17161 uid=0 auid=0 ses=132 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345867261.502:1529): user pid=17170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345867261.502:1530): user pid=17170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345867261.503:1531): pid=17170 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=133 >type=USER_START msg=audit(1345867261.508:1532): user pid=17170 uid=0 auid=0 ses=133 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345867261.519:1533): user pid=17170 uid=0 auid=0 ses=133 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345867261.519:1534): user pid=17170 uid=0 auid=0 ses=133 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345867801.526:1535): user pid=17236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345867801.526:1536): user pid=17236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345867801.526:1537): pid=17236 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=134 >type=USER_START msg=audit(1345867801.531:1538): user pid=17236 uid=0 auid=0 ses=134 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345867801.588:1539): user pid=17236 uid=0 auid=0 ses=134 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345867801.588:1540): user pid=17236 uid=0 auid=0 ses=134 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345868401.595:1541): user pid=17320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345868401.595:1542): user pid=17320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345868401.595:1543): pid=17320 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=135 >type=USER_START msg=audit(1345868401.600:1544): user pid=17320 uid=0 auid=0 ses=135 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345868401.643:1545): user pid=17320 uid=0 auid=0 ses=135 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345868401.643:1546): user pid=17320 uid=0 auid=0 ses=135 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345869001.650:1547): user pid=17383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345869001.650:1548): user pid=17383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345869001.651:1549): pid=17383 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=136 >type=USER_START msg=audit(1345869001.656:1550): user pid=17383 uid=0 auid=0 ses=136 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345869001.717:1551): user pid=17383 uid=0 auid=0 ses=136 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345869001.717:1552): user pid=17383 uid=0 auid=0 ses=136 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345869601.723:1553): user pid=17446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345869601.723:1554): user pid=17446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345869601.724:1555): pid=17446 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=137 >type=USER_START msg=audit(1345869601.729:1556): user pid=17446 uid=0 auid=0 ses=137 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345869601.798:1557): user pid=17446 uid=0 auid=0 ses=137 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345869601.798:1558): user pid=17446 uid=0 auid=0 ses=137 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345870201.804:1559): user pid=17509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345870201.804:1560): user pid=17509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345870201.804:1561): pid=17509 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=138 >type=USER_START msg=audit(1345870201.809:1562): user pid=17509 uid=0 auid=0 ses=138 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345870201.836:1563): user pid=17509 uid=0 auid=0 ses=138 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345870201.837:1564): user pid=17509 uid=0 auid=0 ses=138 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345870801.843:1565): user pid=17572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345870801.843:1566): user pid=17572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345870801.844:1567): pid=17572 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=139 >type=USER_START msg=audit(1345870801.849:1568): user pid=17572 uid=0 auid=0 ses=139 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345870801.894:1569): user pid=17572 uid=0 auid=0 ses=139 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345870801.894:1570): user pid=17572 uid=0 auid=0 ses=139 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345870861.898:1571): user pid=17581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345870861.899:1572): user pid=17581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345870861.899:1573): pid=17581 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=140 >type=USER_START msg=audit(1345870861.904:1574): user pid=17581 uid=0 auid=0 ses=140 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345870861.915:1575): user pid=17581 uid=0 auid=0 ses=140 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345870861.915:1576): user pid=17581 uid=0 auid=0 ses=140 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345871401.922:1577): user pid=17647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345871401.922:1578): user pid=17647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345871401.922:1579): pid=17647 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=141 >type=USER_START msg=audit(1345871401.927:1580): user pid=17647 uid=0 auid=0 ses=141 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345871401.949:1581): user pid=17647 uid=0 auid=0 ses=141 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345871401.949:1582): user pid=17647 uid=0 auid=0 ses=141 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345872001.956:1583): user pid=17705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345872001.956:1584): user pid=17705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345872001.956:1585): pid=17705 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=142 >type=USER_START msg=audit(1345872001.967:1586): user pid=17705 uid=0 auid=0 ses=142 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345872002.023:1587): user pid=17705 uid=0 auid=0 ses=142 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345872002.023:1588): user pid=17705 uid=0 auid=0 ses=142 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345872601.029:1589): user pid=17769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345872601.030:1590): user pid=17769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345872601.030:1591): pid=17769 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=143 >type=USER_START msg=audit(1345872601.039:1592): user pid=17769 uid=0 auid=0 ses=143 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345872601.104:1593): user pid=17769 uid=0 auid=0 ses=143 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345872601.104:1594): user pid=17769 uid=0 auid=0 ses=143 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345873201.110:1595): user pid=17832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345873201.111:1596): user pid=17832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345873201.111:1597): pid=17832 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=144 >type=USER_START msg=audit(1345873201.120:1598): user pid=17832 uid=0 auid=0 ses=144 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345873201.154:1599): user pid=17832 uid=0 auid=0 ses=144 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345873201.154:1600): user pid=17832 uid=0 auid=0 ses=144 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345873801.161:1601): user pid=17895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345873801.161:1602): user pid=17895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345873801.161:1603): pid=17895 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=145 >type=USER_START msg=audit(1345873801.170:1604): user pid=17895 uid=0 auid=0 ses=145 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345873801.233:1605): user pid=17895 uid=0 auid=0 ses=145 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345873801.233:1606): user pid=17895 uid=0 auid=0 ses=145 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345874401.240:1607): user pid=17979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345874401.240:1608): user pid=17979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345874401.240:1609): pid=17979 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=146 >type=USER_START msg=audit(1345874401.245:1610): user pid=17979 uid=0 auid=0 ses=146 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345874401.271:1611): user pid=17979 uid=0 auid=0 ses=146 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345874401.271:1612): user pid=17979 uid=0 auid=0 ses=146 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345874461.276:1613): user pid=17988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345874461.276:1614): user pid=17988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345874461.276:1615): pid=17988 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=147 >type=USER_START msg=audit(1345874461.281:1616): user pid=17988 uid=0 auid=0 ses=147 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345874461.292:1617): user pid=17988 uid=0 auid=0 ses=147 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345874461.292:1618): user pid=17988 uid=0 auid=0 ses=147 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345875001.299:1619): user pid=18054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345875001.299:1620): user pid=18054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345875001.300:1621): pid=18054 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=148 >type=USER_START msg=audit(1345875001.304:1622): user pid=18054 uid=0 auid=0 ses=148 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345875001.371:1623): user pid=18054 uid=0 auid=0 ses=148 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345875001.371:1624): user pid=18054 uid=0 auid=0 ses=148 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345875601.377:1625): user pid=18117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345875601.377:1626): user pid=18117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345875601.378:1627): pid=18117 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=149 >type=USER_START msg=audit(1345875601.387:1628): user pid=18117 uid=0 auid=0 ses=149 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345875601.443:1629): user pid=18117 uid=0 auid=0 ses=149 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345875601.443:1630): user pid=18117 uid=0 auid=0 ses=149 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345876201.450:1631): user pid=18180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345876201.450:1632): user pid=18180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345876201.450:1633): pid=18180 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=150 >type=USER_START msg=audit(1345876201.459:1634): user pid=18180 uid=0 auid=0 ses=150 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345876201.484:1635): user pid=18180 uid=0 auid=0 ses=150 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345876201.484:1636): user pid=18180 uid=0 auid=0 ses=150 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345876801.491:1637): user pid=18243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345876801.491:1638): user pid=18243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345876801.492:1639): pid=18243 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=151 >type=USER_START msg=audit(1345876801.501:1640): user pid=18243 uid=0 auid=0 ses=151 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345876801.555:1641): user pid=18243 uid=0 auid=0 ses=151 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345876801.555:1642): user pid=18243 uid=0 auid=0 ses=151 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345877401.561:1643): user pid=18306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345877401.562:1644): user pid=18306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345877401.562:1645): pid=18306 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=152 >type=USER_START msg=audit(1345877401.571:1646): user pid=18306 uid=0 auid=0 ses=152 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345877401.629:1647): user pid=18306 uid=0 auid=0 ses=152 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345877401.629:1648): user pid=18306 uid=0 auid=0 ses=152 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345878001.635:1649): user pid=18369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345878001.635:1650): user pid=18369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345878001.636:1651): pid=18369 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=153 >type=USER_START msg=audit(1345878001.645:1652): user pid=18369 uid=0 auid=0 ses=153 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345878001.673:1653): user pid=18369 uid=0 auid=0 ses=153 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345878001.673:1654): user pid=18369 uid=0 auid=0 ses=153 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345878061.678:1655): user pid=18378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345878061.678:1656): user pid=18378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345878061.678:1657): pid=18378 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=154 >type=USER_START msg=audit(1345878061.683:1658): user pid=18378 uid=0 auid=0 ses=154 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345878061.694:1659): user pid=18378 uid=0 auid=0 ses=154 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345878061.694:1660): user pid=18378 uid=0 auid=0 ses=154 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345878601.701:1661): user pid=18445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345878601.701:1662): user pid=18445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345878601.702:1663): pid=18445 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=155 >type=USER_START msg=audit(1345878601.710:1664): user pid=18445 uid=0 auid=0 ses=155 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345878601.774:1665): user pid=18445 uid=0 auid=0 ses=155 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345878601.774:1666): user pid=18445 uid=0 auid=0 ses=155 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345879201.781:1667): user pid=18508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345879201.781:1668): user pid=18508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345879201.781:1669): pid=18508 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=156 >type=USER_START msg=audit(1345879201.786:1670): user pid=18508 uid=0 auid=0 ses=156 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345879201.806:1671): user pid=18508 uid=0 auid=0 ses=156 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345879201.807:1672): user pid=18508 uid=0 auid=0 ses=156 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345879801.813:1673): user pid=18571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345879801.814:1674): user pid=18571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345879801.814:1675): pid=18571 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=157 >type=USER_START msg=audit(1345879801.819:1676): user pid=18571 uid=0 auid=0 ses=157 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345879801.869:1677): user pid=18571 uid=0 auid=0 ses=157 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345879801.869:1678): user pid=18571 uid=0 auid=0 ses=157 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345880401.876:1679): user pid=18655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345880401.876:1680): user pid=18655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345880401.876:1681): pid=18655 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=158 >type=USER_START msg=audit(1345880401.881:1682): user pid=18655 uid=0 auid=0 ses=158 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345880401.952:1683): user pid=18655 uid=0 auid=0 ses=158 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345880401.952:1684): user pid=18655 uid=0 auid=0 ses=158 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345881001.958:1685): user pid=18718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345881001.958:1686): user pid=18718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345881001.959:1687): pid=18718 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=159 >type=USER_START msg=audit(1345881001.964:1688): user pid=18718 uid=0 auid=0 ses=159 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345881001.986:1689): user pid=18718 uid=0 auid=0 ses=159 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345881001.987:1690): user pid=18718 uid=0 auid=0 ses=159 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345881601.993:1691): user pid=18781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345881601.994:1692): user pid=18781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345881601.994:1693): pid=18781 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=160 >type=USER_START msg=audit(1345881601.999:1694): user pid=18781 uid=0 auid=0 ses=160 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345881602.047:1695): user pid=18781 uid=0 auid=0 ses=160 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345881602.047:1696): user pid=18781 uid=0 auid=0 ses=160 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345881661.051:1697): user pid=18790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345881661.052:1698): user pid=18790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345881661.052:1699): pid=18790 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=161 >type=USER_START msg=audit(1345881661.061:1700): user pid=18790 uid=0 auid=0 ses=161 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345881661.072:1701): user pid=18790 uid=0 auid=0 ses=161 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345881661.072:1702): user pid=18790 uid=0 auid=0 ses=161 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345882201.079:1703): user pid=18856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345882201.079:1704): user pid=18856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345882201.080:1705): pid=18856 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=162 >type=USER_START msg=audit(1345882201.084:1706): user pid=18856 uid=0 auid=0 ses=162 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345882201.144:1707): user pid=18856 uid=0 auid=0 ses=162 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345882201.144:1708): user pid=18856 uid=0 auid=0 ses=162 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345882801.151:1709): user pid=18919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345882801.151:1710): user pid=18919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345882801.152:1711): pid=18919 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=163 >type=USER_START msg=audit(1345882801.161:1712): user pid=18919 uid=0 auid=0 ses=163 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345882801.183:1713): user pid=18919 uid=0 auid=0 ses=163 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345882801.183:1714): user pid=18919 uid=0 auid=0 ses=163 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345883401.190:1715): user pid=18982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345883401.190:1716): user pid=18982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345883401.191:1717): pid=18982 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=164 >type=USER_START msg=audit(1345883401.200:1718): user pid=18982 uid=0 auid=0 ses=164 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345883401.256:1719): user pid=18982 uid=0 auid=0 ses=164 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345883401.256:1720): user pid=18982 uid=0 auid=0 ses=164 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345884001.263:1721): user pid=19045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345884001.263:1722): user pid=19045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345884001.263:1723): pid=19045 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=165 >type=USER_START msg=audit(1345884001.272:1724): user pid=19045 uid=0 auid=0 ses=165 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345884001.296:1725): user pid=19045 uid=0 auid=0 ses=165 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345884001.296:1726): user pid=19045 uid=0 auid=0 ses=165 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345884601.303:1727): user pid=19109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345884601.303:1728): user pid=19109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345884601.304:1729): pid=19109 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=166 >type=USER_START msg=audit(1345884601.313:1730): user pid=19109 uid=0 auid=0 ses=166 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345884601.361:1731): user pid=19109 uid=0 auid=0 ses=166 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345884601.361:1732): user pid=19109 uid=0 auid=0 ses=166 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345885201.367:1733): user pid=19172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345885201.367:1734): user pid=19172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345885201.368:1735): pid=19172 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=167 >type=USER_START msg=audit(1345885201.377:1736): user pid=19172 uid=0 auid=0 ses=167 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345885201.426:1737): user pid=19172 uid=0 auid=0 ses=167 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345885201.426:1738): user pid=19172 uid=0 auid=0 ses=167 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345885261.430:1739): user pid=19181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345885261.430:1740): user pid=19181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345885261.431:1741): pid=19181 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=168 >type=USER_START msg=audit(1345885261.440:1742): user pid=19181 uid=0 auid=0 ses=168 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345885261.451:1743): user pid=19181 uid=0 auid=0 ses=168 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345885261.451:1744): user pid=19181 uid=0 auid=0 ses=168 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345885801.458:1745): user pid=19247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345885801.458:1746): user pid=19247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345885801.459:1747): pid=19247 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=169 >type=USER_START msg=audit(1345885801.467:1748): user pid=19247 uid=0 auid=0 ses=169 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345885801.489:1749): user pid=19247 uid=0 auid=0 ses=169 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345885801.489:1750): user pid=19247 uid=0 auid=0 ses=169 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345886401.496:1751): user pid=19331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345886401.496:1752): user pid=19331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345886401.496:1753): pid=19331 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=170 >type=USER_START msg=audit(1345886401.501:1754): user pid=19331 uid=0 auid=0 ses=170 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345886401.557:1755): user pid=19331 uid=0 auid=0 ses=170 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345886401.557:1756): user pid=19331 uid=0 auid=0 ses=170 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345887001.563:1757): user pid=19396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345887001.564:1758): user pid=19396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345887001.564:1759): pid=19396 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=171 >type=USER_START msg=audit(1345887001.573:1760): user pid=19396 uid=0 auid=0 ses=171 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345887001.632:1761): user pid=19396 uid=0 auid=0 ses=171 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345887001.632:1762): user pid=19396 uid=0 auid=0 ses=171 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345887601.639:1763): user pid=19459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345887601.639:1764): user pid=19459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345887601.639:1765): pid=19459 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=172 >type=USER_START msg=audit(1345887601.648:1766): user pid=19459 uid=0 auid=0 ses=172 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345887601.660:1767): user pid=19459 uid=0 auid=0 ses=172 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345887601.661:1768): user pid=19459 uid=0 auid=0 ses=172 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345888201.667:1769): user pid=19522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345888201.668:1770): user pid=19522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345888201.668:1771): pid=19522 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=173 >type=USER_START msg=audit(1345888201.677:1772): user pid=19522 uid=0 auid=0 ses=173 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345888201.727:1773): user pid=19522 uid=0 auid=0 ses=173 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345888201.727:1774): user pid=19522 uid=0 auid=0 ses=173 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345888801.734:1775): user pid=19585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345888801.734:1776): user pid=19585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345888801.734:1777): pid=19585 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=174 >type=USER_START msg=audit(1345888801.743:1778): user pid=19585 uid=0 auid=0 ses=174 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345888801.761:1779): user pid=19585 uid=0 auid=0 ses=174 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345888801.761:1780): user pid=19585 uid=0 auid=0 ses=174 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345888861.766:1781): user pid=19594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345888861.766:1782): user pid=19594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345888861.766:1783): pid=19594 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=175 >type=USER_START msg=audit(1345888861.772:1784): user pid=19594 uid=0 auid=0 ses=175 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345888861.783:1785): user pid=19594 uid=0 auid=0 ses=175 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345888861.783:1786): user pid=19594 uid=0 auid=0 ses=175 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345889401.789:1787): user pid=19660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345889401.790:1788): user pid=19660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345889401.790:1789): pid=19660 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=176 >type=USER_START msg=audit(1345889401.801:1790): user pid=19660 uid=0 auid=0 ses=176 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345889401.848:1791): user pid=19660 uid=0 auid=0 ses=176 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345889401.848:1792): user pid=19660 uid=0 auid=0 ses=176 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345890001.854:1793): user pid=19723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345890001.855:1794): user pid=19723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345890001.855:1795): pid=19723 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=177 >type=USER_START msg=audit(1345890001.866:1796): user pid=19723 uid=0 auid=0 ses=177 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345890001.912:1797): user pid=19723 uid=0 auid=0 ses=177 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345890001.912:1798): user pid=19723 uid=0 auid=0 ses=177 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345890601.919:1799): user pid=19787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345890601.919:1800): user pid=19787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345890601.919:1801): pid=19787 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=178 >type=USER_START msg=audit(1345890601.930:1802): user pid=19787 uid=0 auid=0 ses=178 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345890601.960:1803): user pid=19787 uid=0 auid=0 ses=178 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345890601.960:1804): user pid=19787 uid=0 auid=0 ses=178 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345891201.966:1805): user pid=19850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345891201.966:1806): user pid=19850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345891201.967:1807): pid=19850 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=179 >type=USER_START msg=audit(1345891201.978:1808): user pid=19850 uid=0 auid=0 ses=179 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345891202.032:1809): user pid=19850 uid=0 auid=0 ses=179 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345891202.032:1810): user pid=19850 uid=0 auid=0 ses=179 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345891801.039:1811): user pid=19913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345891801.039:1812): user pid=19913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345891801.039:1813): pid=19913 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=180 >type=USER_START msg=audit(1345891801.046:1814): user pid=19913 uid=0 auid=0 ses=180 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345891801.113:1815): user pid=19913 uid=0 auid=0 ses=180 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345891801.113:1816): user pid=19913 uid=0 auid=0 ses=180 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345892401.119:1817): user pid=19997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345892401.119:1818): user pid=19997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345892401.120:1819): pid=19997 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=181 >type=USER_START msg=audit(1345892401.127:1820): user pid=19997 uid=0 auid=0 ses=181 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345892401.163:1821): user pid=19997 uid=0 auid=0 ses=181 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345892401.163:1822): user pid=19997 uid=0 auid=0 ses=181 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345892461.168:1823): user pid=20006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345892461.168:1824): user pid=20006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345892461.168:1825): pid=20006 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=182 >type=USER_START msg=audit(1345892461.173:1826): user pid=20006 uid=0 auid=0 ses=182 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345892461.184:1827): user pid=20006 uid=0 auid=0 ses=182 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345892461.184:1828): user pid=20006 uid=0 auid=0 ses=182 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345893001.191:1829): user pid=20072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345893001.191:1830): user pid=20072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345893001.192:1831): pid=20072 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=183 >type=USER_START msg=audit(1345893001.200:1832): user pid=20072 uid=0 auid=0 ses=183 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345893001.251:1833): user pid=20072 uid=0 auid=0 ses=183 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345893001.251:1834): user pid=20072 uid=0 auid=0 ses=183 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345893601.258:1835): user pid=20135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345893601.258:1836): user pid=20135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345893601.258:1837): pid=20135 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=184 >type=USER_START msg=audit(1345893601.263:1838): user pid=20135 uid=0 auid=0 ses=184 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345893601.288:1839): user pid=20135 uid=0 auid=0 ses=184 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345893601.288:1840): user pid=20135 uid=0 auid=0 ses=184 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345894201.295:1841): user pid=20198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345894201.295:1842): user pid=20198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345894201.296:1843): pid=20198 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=185 >type=USER_START msg=audit(1345894201.305:1844): user pid=20198 uid=0 auid=0 ses=185 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345894201.363:1845): user pid=20198 uid=0 auid=0 ses=185 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345894201.363:1846): user pid=20198 uid=0 auid=0 ses=185 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345894801.369:1847): user pid=20261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345894801.369:1848): user pid=20261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345894801.370:1849): pid=20261 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=186 >type=USER_START msg=audit(1345894801.375:1850): user pid=20261 uid=0 auid=0 ses=186 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345894801.435:1851): user pid=20261 uid=0 auid=0 ses=186 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345894801.435:1852): user pid=20261 uid=0 auid=0 ses=186 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345895401.442:1853): user pid=20324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345895401.442:1854): user pid=20324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345895401.442:1855): pid=20324 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=187 >type=USER_START msg=audit(1345895401.447:1856): user pid=20324 uid=0 auid=0 ses=187 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345895401.477:1857): user pid=20324 uid=0 auid=0 ses=187 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345895401.477:1858): user pid=20324 uid=0 auid=0 ses=187 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345896001.483:1859): user pid=20387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345896001.484:1860): user pid=20387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345896001.484:1861): pid=20387 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=188 >type=USER_START msg=audit(1345896001.489:1862): user pid=20387 uid=0 auid=0 ses=188 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345896001.556:1863): user pid=20387 uid=0 auid=0 ses=188 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345896001.556:1864): user pid=20387 uid=0 auid=0 ses=188 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345896061.561:1865): user pid=20396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345896061.561:1866): user pid=20396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345896061.561:1867): pid=20396 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=189 >type=USER_START msg=audit(1345896061.566:1868): user pid=20396 uid=0 auid=0 ses=189 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345896061.577:1869): user pid=20396 uid=0 auid=0 ses=189 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345896061.577:1870): user pid=20396 uid=0 auid=0 ses=189 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345896601.584:1871): user pid=20463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345896601.584:1872): user pid=20463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345896601.584:1873): pid=20463 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=190 >type=USER_START msg=audit(1345896601.589:1874): user pid=20463 uid=0 auid=0 ses=190 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345896601.654:1875): user pid=20463 uid=0 auid=0 ses=190 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345896601.654:1876): user pid=20463 uid=0 auid=0 ses=190 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345897201.661:1877): user pid=20526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345897201.661:1878): user pid=20526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345897201.661:1879): pid=20526 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=191 >type=USER_START msg=audit(1345897201.670:1880): user pid=20526 uid=0 auid=0 ses=191 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345897201.690:1881): user pid=20526 uid=0 auid=0 ses=191 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345897201.690:1882): user pid=20526 uid=0 auid=0 ses=191 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345897801.697:1883): user pid=20589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345897801.697:1884): user pid=20589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345897801.698:1885): pid=20589 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=192 >type=USER_START msg=audit(1345897801.706:1886): user pid=20589 uid=0 auid=0 ses=192 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345897801.758:1887): user pid=20589 uid=0 auid=0 ses=192 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345897801.758:1888): user pid=20589 uid=0 auid=0 ses=192 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345898401.764:1889): user pid=20652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345898401.764:1890): user pid=20652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345898401.765:1891): pid=20652 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=193 >type=USER_START msg=audit(1345898401.774:1892): user pid=20652 uid=0 auid=0 ses=193 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345898401.790:1893): user pid=20652 uid=0 auid=0 ses=193 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345898401.791:1894): user pid=20652 uid=0 auid=0 ses=193 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345899001.797:1895): user pid=20715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345899001.798:1896): user pid=20715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345899001.798:1897): pid=20715 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=194 >type=USER_START msg=audit(1345899001.807:1898): user pid=20715 uid=0 auid=0 ses=194 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345899001.853:1899): user pid=20715 uid=0 auid=0 ses=194 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345899001.853:1900): user pid=20715 uid=0 auid=0 ses=194 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345899601.859:1901): user pid=20799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345899601.859:1902): user pid=20799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345899601.860:1903): pid=20799 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=195 >type=USER_START msg=audit(1345899601.869:1904): user pid=20799 uid=0 auid=0 ses=195 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345899601.944:1905): user pid=20799 uid=0 auid=0 ses=195 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345899601.944:1906): user pid=20799 uid=0 auid=0 ses=195 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345899661.948:1907): user pid=20808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345899661.948:1908): user pid=20808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345899661.949:1909): pid=20808 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=196 >type=USER_START msg=audit(1345899661.958:1910): user pid=20808 uid=0 auid=0 ses=196 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345899661.969:1911): user pid=20808 uid=0 auid=0 ses=196 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345899661.969:1912): user pid=20808 uid=0 auid=0 ses=196 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345900201.976:1913): user pid=20874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345900201.976:1914): user pid=20874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345900201.976:1915): pid=20874 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=197 >type=USER_START msg=audit(1345900201.981:1916): user pid=20874 uid=0 auid=0 ses=197 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345900202.004:1917): user pid=20874 uid=0 auid=0 ses=197 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345900202.004:1918): user pid=20874 uid=0 auid=0 ses=197 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345900801.011:1919): user pid=20937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345900801.011:1920): user pid=20937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345900801.011:1921): pid=20937 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=198 >type=USER_START msg=audit(1345900801.016:1922): user pid=20937 uid=0 auid=0 ses=198 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345900801.080:1923): user pid=20937 uid=0 auid=0 ses=198 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345900801.080:1924): user pid=20937 uid=0 auid=0 ses=198 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345901401.087:1925): user pid=21001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345901401.087:1926): user pid=21001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345901401.088:1927): pid=21001 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=199 >type=USER_START msg=audit(1345901401.096:1928): user pid=21001 uid=0 auid=0 ses=199 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345901401.121:1929): user pid=21001 uid=0 auid=0 ses=199 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345901401.121:1930): user pid=21001 uid=0 auid=0 ses=199 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345902001.128:1931): user pid=21064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345902001.128:1932): user pid=21064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345902001.128:1933): pid=21064 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=200 >type=USER_START msg=audit(1345902001.133:1934): user pid=21064 uid=0 auid=0 ses=200 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345902001.184:1935): user pid=21064 uid=0 auid=0 ses=200 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345902001.184:1936): user pid=21064 uid=0 auid=0 ses=200 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345902601.191:1937): user pid=21128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345902601.191:1938): user pid=21128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345902601.192:1939): pid=21128 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=201 >type=USER_START msg=audit(1345902601.201:1940): user pid=21128 uid=0 auid=0 ses=201 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345902601.258:1941): user pid=21128 uid=0 auid=0 ses=201 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345902601.258:1942): user pid=21128 uid=0 auid=0 ses=201 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345903201.265:1943): user pid=21191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345903201.265:1944): user pid=21191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345903201.265:1945): pid=21191 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=202 >type=USER_START msg=audit(1345903201.270:1946): user pid=21191 uid=0 auid=0 ses=202 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345903201.301:1947): user pid=21191 uid=0 auid=0 ses=202 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345903201.301:1948): user pid=21191 uid=0 auid=0 ses=202 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345903261.306:1949): user pid=21200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345903261.306:1950): user pid=21200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345903261.307:1951): pid=21200 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=203 >type=USER_START msg=audit(1345903261.315:1952): user pid=21200 uid=0 auid=0 ses=203 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345903261.326:1953): user pid=21200 uid=0 auid=0 ses=203 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345903261.326:1954): user pid=21200 uid=0 auid=0 ses=203 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345903801.333:1955): user pid=21266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345903801.333:1956): user pid=21266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345903801.334:1957): pid=21266 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=204 >type=USER_START msg=audit(1345903801.345:1958): user pid=21266 uid=0 auid=0 ses=204 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345903801.404:1959): user pid=21266 uid=0 auid=0 ses=204 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345903801.404:1960): user pid=21266 uid=0 auid=0 ses=204 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345904401.410:1961): user pid=21329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345904401.410:1962): user pid=21329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345904401.411:1963): pid=21329 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=205 >type=USER_START msg=audit(1345904401.420:1964): user pid=21329 uid=0 auid=0 ses=205 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345904401.484:1965): user pid=21329 uid=0 auid=0 ses=205 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345904401.484:1966): user pid=21329 uid=0 auid=0 ses=205 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345905001.491:1967): user pid=21392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345905001.491:1968): user pid=21392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345905001.492:1969): pid=21392 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=206 >type=USER_START msg=audit(1345905001.501:1970): user pid=21392 uid=0 auid=0 ses=206 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345905001.531:1971): user pid=21392 uid=0 auid=0 ses=206 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345905001.531:1972): user pid=21392 uid=0 auid=0 ses=206 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345905601.538:1973): user pid=21455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345905601.538:1974): user pid=21455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345905601.538:1975): pid=21455 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=207 >type=USER_START msg=audit(1345905601.543:1976): user pid=21455 uid=0 auid=0 ses=207 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345905601.606:1977): user pid=21455 uid=0 auid=0 ses=207 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345905601.606:1978): user pid=21455 uid=0 auid=0 ses=207 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345906201.612:1979): user pid=21518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345906201.612:1980): user pid=21518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345906201.613:1981): pid=21518 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=208 >type=USER_START msg=audit(1345906201.622:1982): user pid=21518 uid=0 auid=0 ses=208 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345906201.653:1983): user pid=21518 uid=0 auid=0 ses=208 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345906201.653:1984): user pid=21518 uid=0 auid=0 ses=208 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345906801.660:1985): user pid=21602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345906801.660:1986): user pid=21602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345906801.660:1987): pid=21602 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=209 >type=USER_START msg=audit(1345906801.665:1988): user pid=21602 uid=0 auid=0 ses=209 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345906801.709:1989): user pid=21602 uid=0 auid=0 ses=209 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345906801.709:1990): user pid=21602 uid=0 auid=0 ses=209 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345906861.714:1991): user pid=21611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345906861.714:1992): user pid=21611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345906861.715:1993): pid=21611 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=210 >type=USER_START msg=audit(1345906861.724:1994): user pid=21611 uid=0 auid=0 ses=210 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345906861.735:1995): user pid=21611 uid=0 auid=0 ses=210 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345906861.735:1996): user pid=21611 uid=0 auid=0 ses=210 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345907401.742:1997): user pid=21677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345907401.742:1998): user pid=21677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345907401.743:1999): pid=21677 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=211 >type=USER_START msg=audit(1345907401.751:2000): user pid=21677 uid=0 auid=0 ses=211 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345907401.799:2001): user pid=21677 uid=0 auid=0 ses=211 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345907401.799:2002): user pid=21677 uid=0 auid=0 ses=211 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345908001.805:2003): user pid=21740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345908001.805:2004): user pid=21740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345908001.806:2005): pid=21740 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=212 >type=USER_START msg=audit(1345908001.815:2006): user pid=21740 uid=0 auid=0 ses=212 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345908001.836:2007): user pid=21740 uid=0 auid=0 ses=212 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345908001.836:2008): user pid=21740 uid=0 auid=0 ses=212 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345908601.843:2009): user pid=21804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345908601.843:2010): user pid=21804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345908601.844:2011): pid=21804 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=213 >type=USER_START msg=audit(1345908601.853:2012): user pid=21804 uid=0 auid=0 ses=213 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345908601.910:2013): user pid=21804 uid=0 auid=0 ses=213 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345908601.910:2014): user pid=21804 uid=0 auid=0 ses=213 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345909201.917:2015): user pid=21867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345909201.917:2016): user pid=21867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345909201.917:2017): pid=21867 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=214 >type=USER_START msg=audit(1345909201.922:2018): user pid=21867 uid=0 auid=0 ses=214 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345909201.976:2019): user pid=21867 uid=0 auid=0 ses=214 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345909201.976:2020): user pid=21867 uid=0 auid=0 ses=214 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345909801.982:2021): user pid=21930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345909801.983:2022): user pid=21930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345909801.983:2023): pid=21930 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=215 >type=USER_START msg=audit(1345909801.992:2024): user pid=21930 uid=0 auid=0 ses=215 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345909802.033:2025): user pid=21930 uid=0 auid=0 ses=215 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345909802.033:2026): user pid=21930 uid=0 auid=0 ses=215 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345909981.039:2027): user pid=21951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345909981.039:2028): user pid=21951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345909981.039:2029): pid=21951 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=216 >type=USER_START msg=audit(1345909981.048:2030): user pid=21951 uid=0 auid=0 ses=216 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345909981.104:2031): user pid=21951 uid=0 auid=0 ses=216 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345909981.105:2032): user pid=21951 uid=0 auid=0 ses=216 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345910401.111:2033): user pid=22002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345910401.111:2034): user pid=22002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345910401.112:2035): pid=22002 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=217 >type=USER_START msg=audit(1345910401.117:2036): user pid=22002 uid=0 auid=0 ses=217 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345910401.172:2037): user pid=22002 uid=0 auid=0 ses=217 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345910401.172:2038): user pid=22002 uid=0 auid=0 ses=217 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345910461.176:2039): user pid=22011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345910461.176:2040): user pid=22011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345910461.177:2041): pid=22011 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=218 >type=USER_START msg=audit(1345910461.182:2042): user pid=22011 uid=0 auid=0 ses=218 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345910461.212:2043): user pid=22011 uid=0 auid=0 ses=218 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345910461.212:2044): user pid=22011 uid=0 auid=0 ses=218 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345911001.219:2045): user pid=22081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345911001.219:2046): user pid=22081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345911001.219:2047): pid=22081 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=219 >type=USER_START msg=audit(1345911001.224:2048): user pid=22081 uid=0 auid=0 ses=219 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345911001.279:2049): user pid=22081 uid=0 auid=0 ses=219 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345911001.279:2050): user pid=22081 uid=0 auid=0 ses=219 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345911601.286:2051): user pid=22144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345911601.286:2052): user pid=22144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345911601.286:2053): pid=22144 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=220 >type=USER_START msg=audit(1345911601.292:2054): user pid=22144 uid=0 auid=0 ses=220 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345911601.314:2055): user pid=22144 uid=0 auid=0 ses=220 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345911601.314:2056): user pid=22144 uid=0 auid=0 ses=220 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345912201.322:2057): user pid=22228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345912201.322:2058): user pid=22228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345912201.323:2059): pid=22228 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=221 >type=USER_START msg=audit(1345912201.331:2060): user pid=22228 uid=0 auid=0 ses=221 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345912201.375:2061): user pid=22228 uid=0 auid=0 ses=221 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345912201.375:2062): user pid=22228 uid=0 auid=0 ses=221 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345912801.381:2063): user pid=22291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345912801.381:2064): user pid=22291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345912801.382:2065): pid=22291 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=222 >type=USER_START msg=audit(1345912801.387:2066): user pid=22291 uid=0 auid=0 ses=222 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345912801.431:2067): user pid=22291 uid=0 auid=0 ses=222 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345912801.431:2068): user pid=22291 uid=0 auid=0 ses=222 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345913401.437:2069): user pid=22354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345913401.437:2070): user pid=22354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345913401.438:2071): pid=22354 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=223 >type=USER_START msg=audit(1345913401.443:2072): user pid=22354 uid=0 auid=0 ses=223 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345913401.461:2073): user pid=22354 uid=0 auid=0 ses=223 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345913401.461:2074): user pid=22354 uid=0 auid=0 ses=223 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345914001.468:2075): user pid=22417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345914001.468:2076): user pid=22417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345914001.468:2077): user pid=22418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345914001.468:2078): user pid=22418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345914001.469:2079): pid=22417 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=224 >type=LOGIN msg=audit(1345914001.469:2080): pid=22418 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=225 >type=USER_START msg=audit(1345914001.473:2081): user pid=22418 uid=0 auid=0 ses=225 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_START msg=audit(1345914001.473:2082): user pid=22417 uid=0 auid=0 ses=224 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345914001.563:2083): user pid=22417 uid=0 auid=0 ses=224 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345914001.563:2084): user pid=22417 uid=0 auid=0 ses=224 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345914001.567:2085): user pid=22418 uid=0 auid=0 ses=225 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345914001.567:2086): user pid=22418 uid=0 auid=0 ses=225 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345914061.572:2087): user pid=22432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345914061.572:2088): user pid=22432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345914061.573:2089): pid=22432 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=226 >type=USER_START msg=audit(1345914061.582:2090): user pid=22432 uid=0 auid=0 ses=226 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345914061.599:2091): user pid=22432 uid=0 auid=0 ses=226 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345914061.599:2092): user pid=22432 uid=0 auid=0 ses=226 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345914601.606:2093): user pid=22503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345914601.606:2094): user pid=22503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345914601.606:2095): pid=22503 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=227 >type=USER_START msg=audit(1345914601.613:2096): user pid=22503 uid=0 auid=0 ses=227 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345914601.665:2097): user pid=22503 uid=0 auid=0 ses=227 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345914601.665:2098): user pid=22503 uid=0 auid=0 ses=227 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345915201.672:2099): user pid=22566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345915201.672:2100): user pid=22566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345915201.673:2101): pid=22566 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=228 >type=USER_START msg=audit(1345915201.684:2102): user pid=22566 uid=0 auid=0 ses=228 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345915201.716:2103): user pid=22566 uid=0 auid=0 ses=228 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345915201.716:2104): user pid=22566 uid=0 auid=0 ses=228 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345915801.723:2105): user pid=22630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345915801.723:2106): user pid=22630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345915801.723:2107): pid=22630 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=229 >type=USER_START msg=audit(1345915801.730:2108): user pid=22630 uid=0 auid=0 ses=229 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345915801.787:2109): user pid=22630 uid=0 auid=0 ses=229 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345915801.787:2110): user pid=22630 uid=0 auid=0 ses=229 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345916401.793:2111): user pid=22693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345916401.793:2112): user pid=22693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345916401.794:2113): pid=22693 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=230 >type=USER_START msg=audit(1345916401.805:2114): user pid=22693 uid=0 auid=0 ses=230 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345916401.825:2115): user pid=22693 uid=0 auid=0 ses=230 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345916401.825:2116): user pid=22693 uid=0 auid=0 ses=230 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345917001.831:2117): user pid=22756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345917001.832:2118): user pid=22756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345917001.832:2119): pid=22756 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=231 >type=USER_START msg=audit(1345917001.843:2120): user pid=22756 uid=0 auid=0 ses=231 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345917001.907:2121): user pid=22756 uid=0 auid=0 ses=231 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345917001.907:2122): user pid=22756 uid=0 auid=0 ses=231 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345917601.913:2123): user pid=22819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345917601.914:2124): user pid=22819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345917601.914:2125): pid=22819 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=232 >type=USER_START msg=audit(1345917601.925:2126): user pid=22819 uid=0 auid=0 ses=232 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345917601.963:2127): user pid=22819 uid=0 auid=0 ses=232 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345917601.963:2128): user pid=22819 uid=0 auid=0 ses=232 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345917661.967:2129): user pid=22828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345917661.968:2130): user pid=22828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345917661.968:2131): pid=22828 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=233 >type=USER_START msg=audit(1345917661.979:2132): user pid=22828 uid=0 auid=0 ses=233 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345917661.996:2133): user pid=22828 uid=0 auid=0 ses=233 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345917661.996:2134): user pid=22828 uid=0 auid=0 ses=233 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345918202.003:2135): user pid=22898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345918202.003:2136): user pid=22898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345918202.003:2137): pid=22898 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=234 >type=USER_START msg=audit(1345918202.012:2138): user pid=22898 uid=0 auid=0 ses=234 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345918202.030:2139): user pid=22898 uid=0 auid=0 ses=234 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345918202.030:2140): user pid=22898 uid=0 auid=0 ses=234 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345918801.036:2141): user pid=22982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345918801.036:2142): user pid=22982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345918801.037:2143): pid=22982 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=235 >type=USER_START msg=audit(1345918801.046:2144): user pid=22982 uid=0 auid=0 ses=235 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345918801.109:2145): user pid=22982 uid=0 auid=0 ses=235 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345918801.109:2146): user pid=22982 uid=0 auid=0 ses=235 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345919401.116:2147): user pid=23045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345919401.116:2148): user pid=23045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345919401.116:2149): pid=23045 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=236 >type=USER_START msg=audit(1345919401.121:2150): user pid=23045 uid=0 auid=0 ses=236 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345919401.174:2151): user pid=23045 uid=0 auid=0 ses=236 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345919401.174:2152): user pid=23045 uid=0 auid=0 ses=236 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345920001.180:2153): user pid=23108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345920001.180:2154): user pid=23108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345920001.181:2155): pid=23108 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=237 >type=USER_START msg=audit(1345920001.186:2156): user pid=23108 uid=0 auid=0 ses=237 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345920001.209:2157): user pid=23108 uid=0 auid=0 ses=237 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345920001.210:2158): user pid=23108 uid=0 auid=0 ses=237 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345920601.218:2159): user pid=23172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345920601.218:2160): user pid=23172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345920601.218:2161): pid=23172 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=238 >type=USER_START msg=audit(1345920601.223:2162): user pid=23172 uid=0 auid=0 ses=238 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345920601.294:2163): user pid=23172 uid=0 auid=0 ses=238 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345920601.294:2164): user pid=23172 uid=0 auid=0 ses=238 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345921201.300:2165): user pid=23235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345921201.300:2166): user pid=23235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345921201.301:2167): pid=23235 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=239 >type=USER_START msg=audit(1345921201.305:2168): user pid=23235 uid=0 auid=0 ses=239 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345921201.335:2169): user pid=23235 uid=0 auid=0 ses=239 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345921201.335:2170): user pid=23235 uid=0 auid=0 ses=239 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345921261.340:2171): user pid=23244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345921261.340:2172): user pid=23244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345921261.341:2173): pid=23244 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=240 >type=USER_START msg=audit(1345921261.345:2174): user pid=23244 uid=0 auid=0 ses=240 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345921261.362:2175): user pid=23244 uid=0 auid=0 ses=240 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345921261.362:2176): user pid=23244 uid=0 auid=0 ses=240 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345921801.369:2177): user pid=23314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345921801.369:2178): user pid=23314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345921801.369:2179): pid=23314 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=241 >type=USER_START msg=audit(1345921801.378:2180): user pid=23314 uid=0 auid=0 ses=241 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345921801.440:2181): user pid=23314 uid=0 auid=0 ses=241 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345921801.440:2182): user pid=23314 uid=0 auid=0 ses=241 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345922401.446:2183): user pid=23377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345922401.446:2184): user pid=23377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345922401.447:2185): pid=23377 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=242 >type=USER_START msg=audit(1345922401.456:2186): user pid=23377 uid=0 auid=0 ses=242 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345922401.513:2187): user pid=23377 uid=0 auid=0 ses=242 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345922401.513:2188): user pid=23377 uid=0 auid=0 ses=242 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345923001.519:2189): user pid=23440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345923001.519:2190): user pid=23440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345923001.520:2191): pid=23440 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=243 >type=USER_START msg=audit(1345923001.529:2192): user pid=23440 uid=0 auid=0 ses=243 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345923001.557:2193): user pid=23440 uid=0 auid=0 ses=243 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345923001.557:2194): user pid=23440 uid=0 auid=0 ses=243 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345923601.575:2195): user pid=23577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345923601.575:2196): user pid=23577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345923601.575:2197): pid=23577 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=244 >type=USER_START msg=audit(1345923601.579:2198): user pid=23577 uid=0 auid=0 ses=244 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345923601.629:2199): user pid=23577 uid=0 auid=0 ses=244 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345923601.629:2200): user pid=23577 uid=0 auid=0 ses=244 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345924201.644:2201): user pid=23794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345924201.644:2202): user pid=23794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345924201.649:2203): pid=23794 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=245 >type=USER_START msg=audit(1345924201.656:2204): user pid=23794 uid=0 auid=0 ses=245 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345924201.718:2205): user pid=23794 uid=0 auid=0 ses=245 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345924201.718:2206): user pid=23794 uid=0 auid=0 ses=245 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345924801.725:2207): user pid=23857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345924801.725:2208): user pid=23857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345924801.726:2209): pid=23857 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=246 >type=USER_START msg=audit(1345924801.731:2210): user pid=23857 uid=0 auid=0 ses=246 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345924801.745:2211): user pid=23857 uid=0 auid=0 ses=246 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345924801.745:2212): user pid=23857 uid=0 auid=0 ses=246 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345924861.755:2213): user pid=23887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345924861.755:2214): user pid=23887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345924861.756:2215): pid=23887 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=247 >type=USER_START msg=audit(1345924861.764:2216): user pid=23887 uid=0 auid=0 ses=247 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345924861.778:2217): user pid=23887 uid=0 auid=0 ses=247 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345924861.778:2218): user pid=23887 uid=0 auid=0 ses=247 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345925401.785:2219): user pid=23953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345925401.785:2220): user pid=23953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345925401.785:2221): pid=23953 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=248 >type=USER_START msg=audit(1345925401.790:2222): user pid=23953 uid=0 auid=0 ses=248 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345925401.893:2223): user pid=23953 uid=0 auid=0 ses=248 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345925401.893:2224): user pid=23953 uid=0 auid=0 ses=248 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345926001.900:2225): user pid=24016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345926001.900:2226): user pid=24016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345926001.901:2227): pid=24016 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=249 >type=USER_START msg=audit(1345926001.905:2228): user pid=24016 uid=0 auid=0 ses=249 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345926001.925:2229): user pid=24016 uid=0 auid=0 ses=249 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345926001.925:2230): user pid=24016 uid=0 auid=0 ses=249 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345926601.932:2231): user pid=24080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345926601.933:2232): user pid=24080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345926601.933:2233): pid=24080 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=250 >type=USER_START msg=audit(1345926601.942:2234): user pid=24080 uid=0 auid=0 ses=250 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345926602.013:2235): user pid=24080 uid=0 auid=0 ses=250 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345926602.013:2236): user pid=24080 uid=0 auid=0 ses=250 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345927201.020:2237): user pid=24143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345927201.020:2238): user pid=24143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345927201.021:2239): pid=24143 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=251 >type=USER_START msg=audit(1345927201.029:2240): user pid=24143 uid=0 auid=0 ses=251 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345927201.103:2241): user pid=24143 uid=0 auid=0 ses=251 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345927201.103:2242): user pid=24143 uid=0 auid=0 ses=251 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345927801.109:2243): user pid=24206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345927801.110:2244): user pid=24206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345927801.110:2245): pid=24206 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=252 >type=USER_START msg=audit(1345927801.119:2246): user pid=24206 uid=0 auid=0 ses=252 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345927801.139:2247): user pid=24206 uid=0 auid=0 ses=252 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345927801.139:2248): user pid=24206 uid=0 auid=0 ses=252 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345928401.146:2249): user pid=24269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345928401.146:2250): user pid=24269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345928401.146:2251): pid=24269 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=253 >type=USER_START msg=audit(1345928401.152:2252): user pid=24269 uid=0 auid=0 ses=253 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345928401.223:2253): user pid=24269 uid=0 auid=0 ses=253 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345928401.223:2254): user pid=24269 uid=0 auid=0 ses=253 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345928461.227:2255): user pid=24278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345928461.227:2256): user pid=24278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345928461.228:2257): pid=24278 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=254 >type=USER_START msg=audit(1345928461.237:2258): user pid=24278 uid=0 auid=0 ses=254 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345928461.248:2259): user pid=24278 uid=0 auid=0 ses=254 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345928461.249:2260): user pid=24278 uid=0 auid=0 ses=254 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345929001.255:2261): user pid=24344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345929001.255:2262): user pid=24344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345929001.256:2263): pid=24344 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=255 >type=USER_START msg=audit(1345929001.265:2264): user pid=24344 uid=0 auid=0 ses=255 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345929001.330:2265): user pid=24344 uid=0 auid=0 ses=255 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345929001.330:2266): user pid=24344 uid=0 auid=0 ses=255 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345929601.336:2267): user pid=24407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345929601.337:2268): user pid=24407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345929601.337:2269): pid=24407 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=256 >type=USER_START msg=audit(1345929601.342:2270): user pid=24407 uid=0 auid=0 ses=256 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345929601.369:2271): user pid=24407 uid=0 auid=0 ses=256 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345929601.369:2272): user pid=24407 uid=0 auid=0 ses=256 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345930201.376:2273): user pid=24471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345930201.376:2274): user pid=24471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345930201.377:2275): pid=24471 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=257 >type=USER_START msg=audit(1345930201.382:2276): user pid=24471 uid=0 auid=0 ses=257 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345930201.450:2277): user pid=24471 uid=0 auid=0 ses=257 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345930201.450:2278): user pid=24471 uid=0 auid=0 ses=257 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345930801.457:2279): user pid=24534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345930801.457:2280): user pid=24534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345930801.457:2281): pid=24534 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=258 >type=USER_START msg=audit(1345930801.462:2282): user pid=24534 uid=0 auid=0 ses=258 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345930801.511:2283): user pid=24534 uid=0 auid=0 ses=258 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345930801.511:2284): user pid=24534 uid=0 auid=0 ses=258 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345931401.519:2285): user pid=24618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345931401.519:2286): user pid=24618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345931401.519:2287): pid=24618 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=259 >type=USER_START msg=audit(1345931401.528:2288): user pid=24618 uid=0 auid=0 ses=259 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345931401.604:2289): user pid=24618 uid=0 auid=0 ses=259 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345931401.604:2290): user pid=24618 uid=0 auid=0 ses=259 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345932001.610:2291): user pid=24681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345932001.610:2292): user pid=24681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345932001.611:2293): pid=24681 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=260 >type=USER_START msg=audit(1345932001.616:2294): user pid=24681 uid=0 auid=0 ses=260 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345932001.685:2295): user pid=24681 uid=0 auid=0 ses=260 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345932001.685:2296): user pid=24681 uid=0 auid=0 ses=260 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345932061.689:2297): user pid=24690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345932061.690:2298): user pid=24690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345932061.690:2299): pid=24690 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=261 >type=USER_START msg=audit(1345932061.695:2300): user pid=24690 uid=0 auid=0 ses=261 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345932061.707:2301): user pid=24690 uid=0 auid=0 ses=261 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345932061.707:2302): user pid=24690 uid=0 auid=0 ses=261 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345932601.715:2303): user pid=24757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345932601.715:2304): user pid=24757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345932601.715:2305): pid=24757 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=262 >type=USER_START msg=audit(1345932601.720:2306): user pid=24757 uid=0 auid=0 ses=262 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345932601.733:2307): user pid=24757 uid=0 auid=0 ses=262 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345932601.733:2308): user pid=24757 uid=0 auid=0 ses=262 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345933201.740:2309): user pid=24820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345933201.740:2310): user pid=24820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345933201.740:2311): pid=24820 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=263 >type=USER_START msg=audit(1345933201.749:2312): user pid=24820 uid=0 auid=0 ses=263 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345933201.806:2313): user pid=24820 uid=0 auid=0 ses=263 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345933201.806:2314): user pid=24820 uid=0 auid=0 ses=263 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345933801.813:2315): user pid=24883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345933801.813:2316): user pid=24883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345933801.813:2317): pid=24883 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=264 >type=USER_START msg=audit(1345933801.818:2318): user pid=24883 uid=0 auid=0 ses=264 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345933801.833:2319): user pid=24883 uid=0 auid=0 ses=264 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345933801.834:2320): user pid=24883 uid=0 auid=0 ses=264 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345934401.840:2321): user pid=24946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345934401.840:2322): user pid=24946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345934401.841:2323): pid=24946 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=265 >type=USER_START msg=audit(1345934401.850:2324): user pid=24946 uid=0 auid=0 ses=265 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345934401.910:2325): user pid=24946 uid=0 auid=0 ses=265 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345934401.910:2326): user pid=24946 uid=0 auid=0 ses=265 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345935001.916:2327): user pid=25009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345935001.916:2328): user pid=25009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345935001.916:2329): pid=25009 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=266 >type=USER_START msg=audit(1345935001.921:2330): user pid=25009 uid=0 auid=0 ses=266 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345935001.982:2331): user pid=25009 uid=0 auid=0 ses=266 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345935001.982:2332): user pid=25009 uid=0 auid=0 ses=266 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345935601.988:2333): user pid=25072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345935601.989:2334): user pid=25072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345935601.989:2335): pid=25072 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=267 >type=USER_START msg=audit(1345935601.994:2336): user pid=25072 uid=0 auid=0 ses=267 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345935602.022:2337): user pid=25072 uid=0 auid=0 ses=267 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345935602.022:2338): user pid=25072 uid=0 auid=0 ses=267 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345935661.027:2339): user pid=25081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345935661.027:2340): user pid=25081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345935661.027:2341): pid=25081 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=268 >type=USER_START msg=audit(1345935661.032:2342): user pid=25081 uid=0 auid=0 ses=268 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345935661.043:2343): user pid=25081 uid=0 auid=0 ses=268 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345935661.043:2344): user pid=25081 uid=0 auid=0 ses=268 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345936201.050:2345): user pid=25147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345936201.050:2346): user pid=25147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345936201.050:2347): pid=25147 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=269 >type=USER_START msg=audit(1345936201.055:2348): user pid=25147 uid=0 auid=0 ses=269 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345936201.120:2349): user pid=25147 uid=0 auid=0 ses=269 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345936201.120:2350): user pid=25147 uid=0 auid=0 ses=269 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345936801.126:2351): user pid=25210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345936801.126:2352): user pid=25210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345936801.127:2353): pid=25210 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=270 >type=USER_START msg=audit(1345936801.132:2354): user pid=25210 uid=0 auid=0 ses=270 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345936801.201:2355): user pid=25210 uid=0 auid=0 ses=270 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345936801.201:2356): user pid=25210 uid=0 auid=0 ses=270 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345937401.208:2357): user pid=25273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345937401.208:2358): user pid=25273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345937401.208:2359): pid=25273 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=271 >type=USER_START msg=audit(1345937401.213:2360): user pid=25273 uid=0 auid=0 ses=271 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345937401.244:2361): user pid=25273 uid=0 auid=0 ses=271 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345937401.244:2362): user pid=25273 uid=0 auid=0 ses=271 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345938001.251:2363): user pid=25357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345938001.251:2364): user pid=25357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345938001.252:2365): pid=25357 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=272 >type=USER_START msg=audit(1345938001.257:2366): user pid=25357 uid=0 auid=0 ses=272 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345938001.330:2367): user pid=25357 uid=0 auid=0 ses=272 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345938001.330:2368): user pid=25357 uid=0 auid=0 ses=272 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345938601.336:2369): user pid=25421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345938601.337:2370): user pid=25421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345938601.337:2371): pid=25421 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=273 >type=USER_START msg=audit(1345938601.342:2372): user pid=25421 uid=0 auid=0 ses=273 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345938601.369:2373): user pid=25421 uid=0 auid=0 ses=273 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345938601.369:2374): user pid=25421 uid=0 auid=0 ses=273 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345939201.376:2375): user pid=25484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345939201.376:2376): user pid=25484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345939201.376:2377): pid=25484 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=274 >type=USER_START msg=audit(1345939201.382:2378): user pid=25484 uid=0 auid=0 ses=274 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345939201.460:2379): user pid=25484 uid=0 auid=0 ses=274 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345939201.460:2380): user pid=25484 uid=0 auid=0 ses=274 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345939261.464:2381): user pid=25493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345939261.465:2382): user pid=25493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345939261.465:2383): pid=25493 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=275 >type=USER_START msg=audit(1345939261.470:2384): user pid=25493 uid=0 auid=0 ses=275 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345939261.481:2385): user pid=25493 uid=0 auid=0 ses=275 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345939261.481:2386): user pid=25493 uid=0 auid=0 ses=275 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345939801.488:2387): user pid=25559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345939801.488:2388): user pid=25559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345939801.488:2389): pid=25559 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=276 >type=USER_START msg=audit(1345939801.493:2390): user pid=25559 uid=0 auid=0 ses=276 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345939801.566:2391): user pid=25559 uid=0 auid=0 ses=276 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345939801.566:2392): user pid=25559 uid=0 auid=0 ses=276 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345940401.573:2393): user pid=25622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345940401.573:2394): user pid=25622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345940401.573:2395): pid=25622 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=277 >type=USER_START msg=audit(1345940401.582:2396): user pid=25622 uid=0 auid=0 ses=277 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345940401.608:2397): user pid=25622 uid=0 auid=0 ses=277 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345940401.608:2398): user pid=25622 uid=0 auid=0 ses=277 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345941001.615:2399): user pid=25685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345941001.615:2400): user pid=25685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345941001.615:2401): pid=25685 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=278 >type=USER_START msg=audit(1345941001.620:2402): user pid=25685 uid=0 auid=0 ses=278 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345941001.719:2403): user pid=25685 uid=0 auid=0 ses=278 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345941001.719:2404): user pid=25685 uid=0 auid=0 ses=278 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345941601.726:2405): user pid=25748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345941601.726:2406): user pid=25748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345941601.726:2407): pid=25748 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=279 >type=USER_START msg=audit(1345941601.732:2408): user pid=25748 uid=0 auid=0 ses=279 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345941601.792:2409): user pid=25748 uid=0 auid=0 ses=279 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345941601.792:2410): user pid=25748 uid=0 auid=0 ses=279 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345942201.799:2411): user pid=25811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345942201.799:2412): user pid=25811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345942201.799:2413): pid=25811 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=280 >type=USER_START msg=audit(1345942201.804:2414): user pid=25811 uid=0 auid=0 ses=280 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345942201.818:2415): user pid=25811 uid=0 auid=0 ses=280 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345942201.818:2416): user pid=25811 uid=0 auid=0 ses=280 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345942801.825:2417): user pid=25874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345942801.825:2418): user pid=25874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345942801.826:2419): pid=25874 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=281 >type=USER_START msg=audit(1345942801.831:2420): user pid=25874 uid=0 auid=0 ses=281 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345942801.888:2421): user pid=25874 uid=0 auid=0 ses=281 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345942801.888:2422): user pid=25874 uid=0 auid=0 ses=281 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345942861.893:2423): user pid=25883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345942861.893:2424): user pid=25883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345942861.893:2425): pid=25883 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=282 >type=USER_START msg=audit(1345942861.898:2426): user pid=25883 uid=0 auid=0 ses=282 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345942861.909:2427): user pid=25883 uid=0 auid=0 ses=282 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345942861.909:2428): user pid=25883 uid=0 auid=0 ses=282 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345943401.916:2429): user pid=25949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345943401.916:2430): user pid=25949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345943401.916:2431): pid=25949 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=283 >type=USER_START msg=audit(1345943401.921:2432): user pid=25949 uid=0 auid=0 ses=283 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345943401.944:2433): user pid=25949 uid=0 auid=0 ses=283 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345943401.944:2434): user pid=25949 uid=0 auid=0 ses=283 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345944001.951:2435): user pid=26012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345944001.951:2436): user pid=26012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345944001.951:2437): pid=26012 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=284 >type=USER_START msg=audit(1345944001.960:2438): user pid=26012 uid=0 auid=0 ses=284 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345944002.033:2439): user pid=26012 uid=0 auid=0 ses=284 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345944002.033:2440): user pid=26012 uid=0 auid=0 ses=284 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345944601.040:2441): user pid=26098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345944601.040:2442): user pid=26098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345944601.041:2443): pid=26098 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=285 >type=USER_START msg=audit(1345944601.049:2444): user pid=26098 uid=0 auid=0 ses=285 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345944601.123:2445): user pid=26098 uid=0 auid=0 ses=285 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345944601.123:2446): user pid=26098 uid=0 auid=0 ses=285 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345945201.129:2447): user pid=26161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345945201.129:2448): user pid=26161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345945201.130:2449): pid=26161 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=286 >type=USER_START msg=audit(1345945201.139:2450): user pid=26161 uid=0 auid=0 ses=286 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345945201.165:2451): user pid=26161 uid=0 auid=0 ses=286 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345945201.166:2452): user pid=26161 uid=0 auid=0 ses=286 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345945801.172:2453): user pid=26224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345945801.173:2454): user pid=26224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345945801.173:2455): pid=26224 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=287 >type=USER_START msg=audit(1345945801.182:2456): user pid=26224 uid=0 auid=0 ses=287 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345945801.252:2457): user pid=26224 uid=0 auid=0 ses=287 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345945801.252:2458): user pid=26224 uid=0 auid=0 ses=287 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345946401.259:2459): user pid=26287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345946401.259:2460): user pid=26287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345946401.259:2461): pid=26287 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=288 >type=USER_START msg=audit(1345946401.264:2462): user pid=26287 uid=0 auid=0 ses=288 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345946401.325:2463): user pid=26287 uid=0 auid=0 ses=288 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345946401.325:2464): user pid=26287 uid=0 auid=0 ses=288 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345946461.330:2465): user pid=26296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345946461.330:2466): user pid=26296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345946461.330:2467): pid=26296 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=289 >type=USER_START msg=audit(1345946461.335:2468): user pid=26296 uid=0 auid=0 ses=289 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345946461.347:2469): user pid=26296 uid=0 auid=0 ses=289 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345946461.348:2470): user pid=26296 uid=0 auid=0 ses=289 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345947001.354:2471): user pid=26362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345947001.354:2472): user pid=26362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345947001.355:2473): pid=26362 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=290 >type=USER_START msg=audit(1345947001.368:2474): user pid=26362 uid=0 auid=0 ses=290 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345947001.396:2475): user pid=26362 uid=0 auid=0 ses=290 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345947001.396:2476): user pid=26362 uid=0 auid=0 ses=290 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345947601.402:2477): user pid=26425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345947601.403:2478): user pid=26425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345947601.403:2479): pid=26425 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=291 >type=USER_START msg=audit(1345947601.412:2480): user pid=26425 uid=0 auid=0 ses=291 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345947601.487:2481): user pid=26425 uid=0 auid=0 ses=291 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345947601.487:2482): user pid=26425 uid=0 auid=0 ses=291 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345948201.493:2483): user pid=26488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345948201.493:2484): user pid=26488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345948201.494:2485): pid=26488 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=292 >type=USER_START msg=audit(1345948201.503:2486): user pid=26488 uid=0 auid=0 ses=292 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345948201.529:2487): user pid=26488 uid=0 auid=0 ses=292 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345948201.530:2488): user pid=26488 uid=0 auid=0 ses=292 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345948801.536:2489): user pid=26551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345948801.536:2490): user pid=26551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345948801.537:2491): pid=26551 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=293 >type=USER_START msg=audit(1345948801.546:2492): user pid=26551 uid=0 auid=0 ses=293 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345948801.615:2493): user pid=26551 uid=0 auid=0 ses=293 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345948801.615:2494): user pid=26551 uid=0 auid=0 ses=293 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345949401.621:2495): user pid=26614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345949401.622:2496): user pid=26614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345949401.622:2497): pid=26614 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=294 >type=USER_START msg=audit(1345949401.628:2498): user pid=26614 uid=0 auid=0 ses=294 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345949401.706:2499): user pid=26614 uid=0 auid=0 ses=294 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345949401.706:2500): user pid=26614 uid=0 auid=0 ses=294 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345950001.712:2501): user pid=26677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345950001.712:2502): user pid=26677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345950001.713:2503): pid=26677 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=295 >type=USER_START msg=audit(1345950001.722:2504): user pid=26677 uid=0 auid=0 ses=295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345950001.761:2505): user pid=26677 uid=0 auid=0 ses=295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345950001.761:2506): user pid=26677 uid=0 auid=0 ses=295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345950061.766:2507): user pid=26686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345950061.766:2508): user pid=26686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345950061.766:2509): pid=26686 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=296 >type=USER_START msg=audit(1345950061.772:2510): user pid=26686 uid=0 auid=0 ses=296 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345950061.783:2511): user pid=26686 uid=0 auid=0 ses=296 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345950061.783:2512): user pid=26686 uid=0 auid=0 ses=296 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345950601.790:2513): user pid=26753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345950601.790:2514): user pid=26753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345950601.790:2515): pid=26753 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=297 >type=USER_START msg=audit(1345950601.797:2516): user pid=26753 uid=0 auid=0 ses=297 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345950601.859:2517): user pid=26753 uid=0 auid=0 ses=297 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345950601.859:2518): user pid=26753 uid=0 auid=0 ses=297 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345951201.866:2519): user pid=26837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345951201.866:2520): user pid=26837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345951201.866:2521): pid=26837 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=298 >type=USER_START msg=audit(1345951201.873:2522): user pid=26837 uid=0 auid=0 ses=298 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345951201.932:2523): user pid=26837 uid=0 auid=0 ses=298 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345951201.932:2524): user pid=26837 uid=0 auid=0 ses=298 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345951801.938:2525): user pid=26900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345951801.939:2526): user pid=26900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345951801.939:2527): pid=26900 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=299 >type=USER_START msg=audit(1345951801.946:2528): user pid=26900 uid=0 auid=0 ses=299 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345951801.965:2529): user pid=26900 uid=0 auid=0 ses=299 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345951801.965:2530): user pid=26900 uid=0 auid=0 ses=299 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345952401.971:2531): user pid=26963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345952401.972:2532): user pid=26963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345952401.972:2533): pid=26963 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=300 >type=USER_START msg=audit(1345952401.979:2534): user pid=26963 uid=0 auid=0 ses=300 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345952402.053:2535): user pid=26963 uid=0 auid=0 ses=300 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345952402.053:2536): user pid=26963 uid=0 auid=0 ses=300 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345953001.060:2537): user pid=27026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345953001.060:2538): user pid=27026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345953001.060:2539): pid=27026 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=301 >type=USER_START msg=audit(1345953001.068:2540): user pid=27026 uid=0 auid=0 ses=301 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345953001.090:2541): user pid=27026 uid=0 auid=0 ses=301 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345953001.090:2542): user pid=27026 uid=0 auid=0 ses=301 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345953601.097:2543): user pid=27089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345953601.097:2544): user pid=27089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345953601.098:2545): pid=27089 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=302 >type=USER_START msg=audit(1345953601.105:2546): user pid=27089 uid=0 auid=0 ses=302 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345953601.165:2547): user pid=27089 uid=0 auid=0 ses=302 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345953601.165:2548): user pid=27089 uid=0 auid=0 ses=302 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345953661.169:2549): user pid=27098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345953661.170:2550): user pid=27098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345953661.170:2551): pid=27098 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=303 >type=USER_START msg=audit(1345953661.177:2552): user pid=27098 uid=0 auid=0 ses=303 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345953661.188:2553): user pid=27098 uid=0 auid=0 ses=303 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345953661.188:2554): user pid=27098 uid=0 auid=0 ses=303 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345954201.195:2555): user pid=27164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345954201.195:2556): user pid=27164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345954201.195:2557): pid=27164 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=304 >type=USER_START msg=audit(1345954201.200:2558): user pid=27164 uid=0 auid=0 ses=304 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345954201.263:2559): user pid=27164 uid=0 auid=0 ses=304 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345954201.263:2560): user pid=27164 uid=0 auid=0 ses=304 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345954801.269:2561): user pid=27227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345954801.269:2562): user pid=27227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345954801.270:2563): pid=27227 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=305 >type=USER_START msg=audit(1345954801.279:2564): user pid=27227 uid=0 auid=0 ses=305 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345954801.318:2565): user pid=27227 uid=0 auid=0 ses=305 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345954801.318:2566): user pid=27227 uid=0 auid=0 ses=305 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345955401.325:2567): user pid=27290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345955401.325:2568): user pid=27290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345955401.325:2569): pid=27290 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=306 >type=USER_START msg=audit(1345955401.330:2570): user pid=27290 uid=0 auid=0 ses=306 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345955401.383:2571): user pid=27290 uid=0 auid=0 ses=306 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345955401.383:2572): user pid=27290 uid=0 auid=0 ses=306 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345956001.389:2573): user pid=27353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345956001.389:2574): user pid=27353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345956001.390:2575): pid=27353 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=307 >type=USER_START msg=audit(1345956001.399:2576): user pid=27353 uid=0 auid=0 ses=307 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345956001.465:2577): user pid=27353 uid=0 auid=0 ses=307 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345956001.465:2578): user pid=27353 uid=0 auid=0 ses=307 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345956601.471:2579): user pid=27417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345956601.471:2580): user pid=27417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345956601.472:2581): pid=27417 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=308 >type=USER_START msg=audit(1345956601.481:2582): user pid=27417 uid=0 auid=0 ses=308 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345956601.526:2583): user pid=27417 uid=0 auid=0 ses=308 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345956601.526:2584): user pid=27417 uid=0 auid=0 ses=308 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345957201.532:2585): user pid=27480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345957201.532:2586): user pid=27480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345957201.533:2587): pid=27480 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=309 >type=USER_START msg=audit(1345957201.542:2588): user pid=27480 uid=0 auid=0 ses=309 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345957201.609:2589): user pid=27480 uid=0 auid=0 ses=309 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345957201.609:2590): user pid=27480 uid=0 auid=0 ses=309 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345957261.614:2591): user pid=27489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345957261.614:2592): user pid=27489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345957261.615:2593): pid=27489 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=310 >type=USER_START msg=audit(1345957261.624:2594): user pid=27489 uid=0 auid=0 ses=310 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345957261.635:2595): user pid=27489 uid=0 auid=0 ses=310 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345957261.635:2596): user pid=27489 uid=0 auid=0 ses=310 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345957801.642:2597): user pid=27576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345957801.642:2598): user pid=27576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345957801.643:2599): pid=27576 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=311 >type=USER_START msg=audit(1345957801.647:2600): user pid=27576 uid=0 auid=0 ses=311 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345957801.676:2601): user pid=27576 uid=0 auid=0 ses=311 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345957801.676:2602): user pid=27576 uid=0 auid=0 ses=311 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345958401.683:2603): user pid=27639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345958401.683:2604): user pid=27639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345958401.683:2605): pid=27639 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=312 >type=USER_START msg=audit(1345958401.688:2606): user pid=27639 uid=0 auid=0 ses=312 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345958401.763:2607): user pid=27639 uid=0 auid=0 ses=312 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345958401.763:2608): user pid=27639 uid=0 auid=0 ses=312 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345959001.770:2609): user pid=27703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345959001.770:2610): user pid=27703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345959001.770:2611): pid=27703 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=313 >type=USER_START msg=audit(1345959001.779:2612): user pid=27703 uid=0 auid=0 ses=313 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345959001.852:2613): user pid=27703 uid=0 auid=0 ses=313 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345959001.852:2614): user pid=27703 uid=0 auid=0 ses=313 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345959601.859:2615): user pid=27766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345959601.859:2616): user pid=27766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345959601.859:2617): pid=27766 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=314 >type=USER_START msg=audit(1345959601.864:2618): user pid=27766 uid=0 auid=0 ses=314 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345959601.898:2619): user pid=27766 uid=0 auid=0 ses=314 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345959601.898:2620): user pid=27766 uid=0 auid=0 ses=314 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345960201.904:2621): user pid=27829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345960201.905:2622): user pid=27829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345960201.905:2623): pid=27829 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=315 >type=USER_START msg=audit(1345960201.914:2624): user pid=27829 uid=0 auid=0 ses=315 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345960201.973:2625): user pid=27829 uid=0 auid=0 ses=315 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345960201.973:2626): user pid=27829 uid=0 auid=0 ses=315 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345960801.980:2627): user pid=27892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345960801.980:2628): user pid=27892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345960801.980:2629): pid=27892 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=316 >type=USER_START msg=audit(1345960801.985:2630): user pid=27892 uid=0 auid=0 ses=316 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345960802.006:2631): user pid=27892 uid=0 auid=0 ses=316 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345960802.007:2632): user pid=27892 uid=0 auid=0 ses=316 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345960861.011:2633): user pid=27901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345960861.012:2634): user pid=27901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345960861.012:2635): pid=27901 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=317 >type=USER_START msg=audit(1345960861.017:2636): user pid=27901 uid=0 auid=0 ses=317 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345960861.028:2637): user pid=27901 uid=0 auid=0 ses=317 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345960861.028:2638): user pid=27901 uid=0 auid=0 ses=317 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345961401.035:2639): user pid=27967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345961401.035:2640): user pid=27967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345961401.035:2641): pid=27967 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=318 >type=USER_START msg=audit(1345961401.040:2642): user pid=27967 uid=0 auid=0 ses=318 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345961401.110:2643): user pid=27967 uid=0 auid=0 ses=318 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345961401.110:2644): user pid=27967 uid=0 auid=0 ses=318 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345962001.116:2645): user pid=28030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345962001.116:2646): user pid=28030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345962001.117:2647): pid=28030 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=319 >type=USER_START msg=audit(1345962001.122:2648): user pid=28030 uid=0 auid=0 ses=319 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345962001.182:2649): user pid=28030 uid=0 auid=0 ses=319 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345962001.182:2650): user pid=28030 uid=0 auid=0 ses=319 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345962601.189:2651): user pid=28094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345962601.189:2652): user pid=28094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345962601.189:2653): pid=28094 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=320 >type=USER_START msg=audit(1345962601.194:2654): user pid=28094 uid=0 auid=0 ses=320 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345962601.220:2655): user pid=28094 uid=0 auid=0 ses=320 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345962601.220:2656): user pid=28094 uid=0 auid=0 ses=320 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345963201.227:2657): user pid=28157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345963201.227:2658): user pid=28157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345963201.227:2659): pid=28157 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=321 >type=USER_START msg=audit(1345963201.232:2660): user pid=28157 uid=0 auid=0 ses=321 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345963201.295:2661): user pid=28157 uid=0 auid=0 ses=321 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345963201.295:2662): user pid=28157 uid=0 auid=0 ses=321 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345963801.301:2663): user pid=28220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345963801.302:2664): user pid=28220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345963801.302:2665): pid=28220 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=322 >type=USER_START msg=audit(1345963801.307:2666): user pid=28220 uid=0 auid=0 ses=322 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345963801.376:2667): user pid=28220 uid=0 auid=0 ses=322 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345963801.376:2668): user pid=28220 uid=0 auid=0 ses=322 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345964401.382:2669): user pid=28304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345964401.382:2670): user pid=28304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345964401.383:2671): pid=28304 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=323 >type=USER_START msg=audit(1345964401.388:2672): user pid=28304 uid=0 auid=0 ses=323 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345964401.417:2673): user pid=28304 uid=0 auid=0 ses=323 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345964401.417:2674): user pid=28304 uid=0 auid=0 ses=323 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345964461.422:2675): user pid=28313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345964461.422:2676): user pid=28313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345964461.422:2677): pid=28313 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=324 >type=USER_START msg=audit(1345964461.428:2678): user pid=28313 uid=0 auid=0 ses=324 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345964461.439:2679): user pid=28313 uid=0 auid=0 ses=324 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345964461.439:2680): user pid=28313 uid=0 auid=0 ses=324 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345965001.446:2681): user pid=28379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345965001.446:2682): user pid=28379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345965001.446:2683): pid=28379 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=325 >type=USER_START msg=audit(1345965001.452:2684): user pid=28379 uid=0 auid=0 ses=325 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345965001.512:2685): user pid=28379 uid=0 auid=0 ses=325 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345965001.512:2686): user pid=28379 uid=0 auid=0 ses=325 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345965601.519:2687): user pid=28442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345965601.519:2688): user pid=28442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345965601.519:2689): pid=28442 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=326 >type=USER_START msg=audit(1345965601.526:2690): user pid=28442 uid=0 auid=0 ses=326 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345965601.567:2691): user pid=28442 uid=0 auid=0 ses=326 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345965601.567:2692): user pid=28442 uid=0 auid=0 ses=326 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345966201.573:2693): user pid=28505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345966201.573:2694): user pid=28505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345966201.573:2695): pid=28505 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=327 >type=USER_START msg=audit(1345966201.585:2696): user pid=28505 uid=0 auid=0 ses=327 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345966201.640:2697): user pid=28505 uid=0 auid=0 ses=327 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345966201.640:2698): user pid=28505 uid=0 auid=0 ses=327 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345966801.647:2699): user pid=28568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345966801.647:2700): user pid=28568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345966801.647:2701): pid=28568 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=328 >type=USER_START msg=audit(1345966801.654:2702): user pid=28568 uid=0 auid=0 ses=328 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345966801.731:2703): user pid=28568 uid=0 auid=0 ses=328 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345966801.731:2704): user pid=28568 uid=0 auid=0 ses=328 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345967401.737:2705): user pid=28631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345967401.737:2706): user pid=28631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345967401.738:2707): pid=28631 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=329 >type=USER_START msg=audit(1345967401.749:2708): user pid=28631 uid=0 auid=0 ses=329 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345967401.781:2709): user pid=28631 uid=0 auid=0 ses=329 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345967401.781:2710): user pid=28631 uid=0 auid=0 ses=329 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345968001.787:2711): user pid=28694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345968001.787:2712): user pid=28694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345968001.788:2713): pid=28694 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=330 >type=USER_START msg=audit(1345968001.799:2714): user pid=28694 uid=0 auid=0 ses=330 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345968001.867:2715): user pid=28694 uid=0 auid=0 ses=330 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345968001.867:2716): user pid=28694 uid=0 auid=0 ses=330 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345968061.872:2717): user pid=28703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345968061.872:2718): user pid=28703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345968061.872:2719): pid=28703 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=331 >type=USER_START msg=audit(1345968061.879:2720): user pid=28703 uid=0 auid=0 ses=331 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345968061.890:2721): user pid=28703 uid=0 auid=0 ses=331 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345968061.890:2722): user pid=28703 uid=0 auid=0 ses=331 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345968601.897:2723): user pid=28770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345968601.897:2724): user pid=28770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345968601.898:2725): pid=28770 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=332 >type=USER_START msg=audit(1345968601.906:2726): user pid=28770 uid=0 auid=0 ses=332 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345968601.973:2727): user pid=28770 uid=0 auid=0 ses=332 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345968601.973:2728): user pid=28770 uid=0 auid=0 ses=332 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345969201.979:2729): user pid=28833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345969201.980:2730): user pid=28833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345969201.980:2731): pid=28833 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=333 >type=USER_START msg=audit(1345969201.989:2732): user pid=28833 uid=0 auid=0 ses=333 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345969202.002:2733): user pid=28833 uid=0 auid=0 ses=333 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345969202.002:2734): user pid=28833 uid=0 auid=0 ses=333 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345969801.009:2735): user pid=28917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345969801.009:2736): user pid=28917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345969801.009:2737): pid=28917 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=334 >type=USER_START msg=audit(1345969801.014:2738): user pid=28917 uid=0 auid=0 ses=334 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345969801.060:2739): user pid=28917 uid=0 auid=0 ses=334 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345969801.060:2740): user pid=28917 uid=0 auid=0 ses=334 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345970401.066:2741): user pid=28980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345970401.066:2742): user pid=28980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345970401.067:2743): pid=28980 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=335 >type=USER_START msg=audit(1345970401.076:2744): user pid=28980 uid=0 auid=0 ses=335 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345970401.112:2745): user pid=28980 uid=0 auid=0 ses=335 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345970401.112:2746): user pid=28980 uid=0 auid=0 ses=335 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345971001.119:2747): user pid=29043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345971001.119:2748): user pid=29043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345971001.120:2749): pid=29043 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=336 >type=USER_START msg=audit(1345971001.129:2750): user pid=29043 uid=0 auid=0 ses=336 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345971001.189:2751): user pid=29043 uid=0 auid=0 ses=336 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345971001.189:2752): user pid=29043 uid=0 auid=0 ses=336 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345971601.196:2753): user pid=29107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345971601.197:2754): user pid=29107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345971601.197:2755): pid=29107 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=337 >type=USER_START msg=audit(1345971601.205:2756): user pid=29107 uid=0 auid=0 ses=337 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345971601.270:2757): user pid=29107 uid=0 auid=0 ses=337 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345971601.270:2758): user pid=29107 uid=0 auid=0 ses=337 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345971661.275:2759): user pid=29116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345971661.275:2760): user pid=29116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345971661.276:2761): pid=29116 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=338 >type=USER_START msg=audit(1345971661.285:2762): user pid=29116 uid=0 auid=0 ses=338 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345971661.296:2763): user pid=29116 uid=0 auid=0 ses=338 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345971661.296:2764): user pid=29116 uid=0 auid=0 ses=338 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345972201.303:2765): user pid=29182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345972201.303:2766): user pid=29182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345972201.304:2767): pid=29182 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=339 >type=USER_START msg=audit(1345972201.313:2768): user pid=29182 uid=0 auid=0 ses=339 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345972201.338:2769): user pid=29182 uid=0 auid=0 ses=339 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345972201.338:2770): user pid=29182 uid=0 auid=0 ses=339 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345972801.345:2771): user pid=29245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345972801.345:2772): user pid=29245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345972801.345:2773): pid=29245 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=340 >type=USER_START msg=audit(1345972801.354:2774): user pid=29245 uid=0 auid=0 ses=340 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345972801.408:2775): user pid=29245 uid=0 auid=0 ses=340 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345972801.408:2776): user pid=29245 uid=0 auid=0 ses=340 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345973401.414:2777): user pid=29310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345973401.415:2778): user pid=29310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345973401.415:2779): pid=29310 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=341 >type=USER_START msg=audit(1345973401.424:2780): user pid=29310 uid=0 auid=0 ses=341 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345973401.484:2781): user pid=29310 uid=0 auid=0 ses=341 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345973401.484:2782): user pid=29310 uid=0 auid=0 ses=341 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345974001.491:2783): user pid=29373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345974001.491:2784): user pid=29373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345974001.491:2785): pid=29373 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=342 >type=USER_START msg=audit(1345974001.496:2786): user pid=29373 uid=0 auid=0 ses=342 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345974001.526:2787): user pid=29373 uid=0 auid=0 ses=342 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345974001.526:2788): user pid=29373 uid=0 auid=0 ses=342 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345974601.533:2789): user pid=29437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345974601.533:2790): user pid=29437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345974601.533:2791): pid=29437 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=343 >type=USER_START msg=audit(1345974601.538:2792): user pid=29437 uid=0 auid=0 ses=343 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345974601.613:2793): user pid=29437 uid=0 auid=0 ses=343 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345974601.613:2794): user pid=29437 uid=0 auid=0 ses=343 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345975201.619:2795): user pid=29521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345975201.619:2796): user pid=29521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345975201.620:2797): pid=29521 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=344 >type=USER_START msg=audit(1345975201.629:2798): user pid=29521 uid=0 auid=0 ses=344 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345975201.660:2799): user pid=29521 uid=0 auid=0 ses=344 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345975201.660:2800): user pid=29521 uid=0 auid=0 ses=344 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345975261.665:2801): user pid=29530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345975261.665:2802): user pid=29530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345975261.666:2803): pid=29530 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=345 >type=USER_START msg=audit(1345975261.674:2804): user pid=29530 uid=0 auid=0 ses=345 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345975261.686:2805): user pid=29530 uid=0 auid=0 ses=345 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345975261.686:2806): user pid=29530 uid=0 auid=0 ses=345 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345975801.693:2807): user pid=29596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345975801.693:2808): user pid=29596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345975801.694:2809): pid=29596 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=346 >type=USER_START msg=audit(1345975801.703:2810): user pid=29596 uid=0 auid=0 ses=346 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345975801.769:2811): user pid=29596 uid=0 auid=0 ses=346 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345975801.769:2812): user pid=29596 uid=0 auid=0 ses=346 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345976401.776:2813): user pid=29659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345976401.776:2814): user pid=29659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345976401.777:2815): pid=29659 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=347 >type=USER_START msg=audit(1345976401.785:2816): user pid=29659 uid=0 auid=0 ses=347 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345976401.842:2817): user pid=29659 uid=0 auid=0 ses=347 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345976401.842:2818): user pid=29659 uid=0 auid=0 ses=347 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345977001.849:2819): user pid=29722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345977001.849:2820): user pid=29722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345977001.849:2821): pid=29722 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=348 >type=USER_START msg=audit(1345977001.854:2822): user pid=29722 uid=0 auid=0 ses=348 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345977001.899:2823): user pid=29722 uid=0 auid=0 ses=348 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345977001.899:2824): user pid=29722 uid=0 auid=0 ses=348 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345977601.905:2825): user pid=29785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345977601.905:2826): user pid=29785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345977601.906:2827): pid=29785 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=349 >type=USER_START msg=audit(1345977601.915:2828): user pid=29785 uid=0 auid=0 ses=349 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345977601.963:2829): user pid=29785 uid=0 auid=0 ses=349 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345977601.963:2830): user pid=29785 uid=0 auid=0 ses=349 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345978201.969:2831): user pid=29848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345978201.969:2832): user pid=29848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345978201.970:2833): pid=29848 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=350 >type=USER_START msg=audit(1345978201.979:2834): user pid=29848 uid=0 auid=0 ses=350 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345978202.027:2835): user pid=29848 uid=0 auid=0 ses=350 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345978202.027:2836): user pid=29848 uid=0 auid=0 ses=350 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345978801.033:2837): user pid=29911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345978801.033:2838): user pid=29911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345978801.034:2839): pid=29911 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=351 >type=USER_START msg=audit(1345978801.043:2840): user pid=29911 uid=0 auid=0 ses=351 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345978801.061:2841): user pid=29911 uid=0 auid=0 ses=351 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345978801.062:2842): user pid=29911 uid=0 auid=0 ses=351 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345978861.066:2843): user pid=29920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345978861.066:2844): user pid=29920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345978861.067:2845): pid=29920 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=352 >type=USER_START msg=audit(1345978861.076:2846): user pid=29920 uid=0 auid=0 ses=352 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345978861.087:2847): user pid=29920 uid=0 auid=0 ses=352 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345978861.087:2848): user pid=29920 uid=0 auid=0 ses=352 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345979401.094:2849): user pid=29986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345979401.094:2850): user pid=29986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345979401.094:2851): pid=29986 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=353 >type=USER_START msg=audit(1345979401.102:2852): user pid=29986 uid=0 auid=0 ses=353 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345979401.149:2853): user pid=29986 uid=0 auid=0 ses=353 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345979401.149:2854): user pid=29986 uid=0 auid=0 ses=353 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345980001.155:2855): user pid=30049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345980001.155:2856): user pid=30049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345980001.156:2857): pid=30049 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=354 >type=USER_START msg=audit(1345980001.167:2858): user pid=30049 uid=0 auid=0 ses=354 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345980001.187:2859): user pid=30049 uid=0 auid=0 ses=354 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345980001.187:2860): user pid=30049 uid=0 auid=0 ses=354 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345980601.194:2861): user pid=30113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345980601.194:2862): user pid=30113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345980601.195:2863): pid=30113 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=355 >type=USER_START msg=audit(1345980601.206:2864): user pid=30113 uid=0 auid=0 ses=355 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345980601.261:2865): user pid=30113 uid=0 auid=0 ses=355 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345980601.261:2866): user pid=30113 uid=0 auid=0 ses=355 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345981201.267:2867): user pid=30176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345981201.267:2868): user pid=30176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345981201.268:2869): pid=30176 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=356 >type=USER_START msg=audit(1345981201.275:2870): user pid=30176 uid=0 auid=0 ses=356 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345981201.325:2871): user pid=30176 uid=0 auid=0 ses=356 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345981201.325:2872): user pid=30176 uid=0 auid=0 ses=356 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345981801.331:2873): user pid=30260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345981801.332:2874): user pid=30260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345981801.332:2875): pid=30260 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=357 >type=USER_START msg=audit(1345981801.339:2876): user pid=30260 uid=0 auid=0 ses=357 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345981801.359:2877): user pid=30260 uid=0 auid=0 ses=357 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345981801.359:2878): user pid=30260 uid=0 auid=0 ses=357 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345982401.366:2879): user pid=30323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345982401.366:2880): user pid=30323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345982401.366:2881): pid=30323 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=358 >type=USER_START msg=audit(1345982401.373:2882): user pid=30323 uid=0 auid=0 ses=358 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345982401.430:2883): user pid=30323 uid=0 auid=0 ses=358 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345982401.430:2884): user pid=30323 uid=0 auid=0 ses=358 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345982461.434:2885): user pid=30332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345982461.435:2886): user pid=30332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345982461.435:2887): pid=30332 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=359 >type=USER_START msg=audit(1345982461.442:2888): user pid=30332 uid=0 auid=0 ses=359 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345982461.453:2889): user pid=30332 uid=0 auid=0 ses=359 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345982461.453:2890): user pid=30332 uid=0 auid=0 ses=359 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345983001.460:2891): user pid=30398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345983001.460:2892): user pid=30398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345983001.461:2893): pid=30398 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=360 >type=USER_START msg=audit(1345983001.469:2894): user pid=30398 uid=0 auid=0 ses=360 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345983001.519:2895): user pid=30398 uid=0 auid=0 ses=360 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345983001.519:2896): user pid=30398 uid=0 auid=0 ses=360 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345983601.526:2897): user pid=30461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345983601.526:2898): user pid=30461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345983601.527:2899): pid=30461 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=361 >type=USER_START msg=audit(1345983601.535:2900): user pid=30461 uid=0 auid=0 ses=361 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345983601.555:2901): user pid=30461 uid=0 auid=0 ses=361 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345983601.555:2902): user pid=30461 uid=0 auid=0 ses=361 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345984201.562:2903): user pid=30524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345984201.562:2904): user pid=30524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345984201.563:2905): pid=30524 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=362 >type=USER_START msg=audit(1345984201.572:2906): user pid=30524 uid=0 auid=0 ses=362 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345984201.631:2907): user pid=30524 uid=0 auid=0 ses=362 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345984201.631:2908): user pid=30524 uid=0 auid=0 ses=362 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345984801.638:2909): user pid=30587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345984801.638:2910): user pid=30587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345984801.638:2911): pid=30587 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=363 >type=USER_START msg=audit(1345984801.647:2912): user pid=30587 uid=0 auid=0 ses=363 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345984801.673:2913): user pid=30587 uid=0 auid=0 ses=363 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345984801.673:2914): user pid=30587 uid=0 auid=0 ses=363 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345985401.680:2915): user pid=30650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345985401.680:2916): user pid=30650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345985401.680:2917): pid=30650 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=364 >type=USER_START msg=audit(1345985401.685:2918): user pid=30650 uid=0 auid=0 ses=364 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345985401.752:2919): user pid=30650 uid=0 auid=0 ses=364 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345985401.752:2920): user pid=30650 uid=0 auid=0 ses=364 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345986001.759:2921): user pid=30713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345986001.759:2922): user pid=30713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345986001.760:2923): pid=30713 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=365 >type=USER_START msg=audit(1345986001.765:2924): user pid=30713 uid=0 auid=0 ses=365 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345986001.842:2925): user pid=30713 uid=0 auid=0 ses=365 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345986001.842:2926): user pid=30713 uid=0 auid=0 ses=365 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345986061.846:2927): user pid=30722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345986061.846:2928): user pid=30722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345986061.847:2929): pid=30722 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=366 >type=USER_START msg=audit(1345986061.856:2930): user pid=30722 uid=0 auid=0 ses=366 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345986061.867:2931): user pid=30722 uid=0 auid=0 ses=366 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345986061.867:2932): user pid=30722 uid=0 auid=0 ses=366 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345986601.874:2933): user pid=30789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345986601.874:2934): user pid=30789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345986601.874:2935): pid=30789 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=367 >type=USER_START msg=audit(1345986601.881:2936): user pid=30789 uid=0 auid=0 ses=367 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345986601.911:2937): user pid=30789 uid=0 auid=0 ses=367 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345986601.911:2938): user pid=30789 uid=0 auid=0 ses=367 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345987201.918:2939): user pid=30852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345987201.918:2940): user pid=30852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345987201.918:2941): pid=30852 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=368 >type=USER_START msg=audit(1345987201.925:2942): user pid=30852 uid=0 auid=0 ses=368 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345987201.988:2943): user pid=30852 uid=0 auid=0 ses=368 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345987201.988:2944): user pid=30852 uid=0 auid=0 ses=368 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345987801.994:2945): user pid=30916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345987801.994:2946): user pid=30916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345987801.995:2947): pid=30916 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=369 >type=USER_START msg=audit(1345987802.002:2948): user pid=30916 uid=0 auid=0 ses=369 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345987802.020:2949): user pid=30916 uid=0 auid=0 ses=369 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345987802.020:2950): user pid=30916 uid=0 auid=0 ses=369 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345988401.027:2951): user pid=31000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345988401.027:2952): user pid=31000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345988401.027:2953): pid=31000 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=370 >type=USER_START msg=audit(1345988401.035:2954): user pid=31000 uid=0 auid=0 ses=370 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345988401.093:2955): user pid=31000 uid=0 auid=0 ses=370 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345988401.093:2956): user pid=31000 uid=0 auid=0 ses=370 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345989001.100:2957): user pid=31063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345989001.100:2958): user pid=31063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345989001.100:2959): pid=31063 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=371 >type=USER_START msg=audit(1345989001.107:2960): user pid=31063 uid=0 auid=0 ses=371 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345989001.157:2961): user pid=31063 uid=0 auid=0 ses=371 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345989001.157:2962): user pid=31063 uid=0 auid=0 ses=371 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345989601.164:2963): user pid=31126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345989601.164:2964): user pid=31126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345989601.165:2965): pid=31126 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=372 >type=USER_START msg=audit(1345989601.176:2966): user pid=31126 uid=0 auid=0 ses=372 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345989601.200:2967): user pid=31126 uid=0 auid=0 ses=372 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345989601.200:2968): user pid=31126 uid=0 auid=0 ses=372 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345989661.205:2969): user pid=31135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345989661.205:2970): user pid=31135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345989661.205:2971): pid=31135 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=373 >type=USER_START msg=audit(1345989661.212:2972): user pid=31135 uid=0 auid=0 ses=373 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345989661.223:2973): user pid=31135 uid=0 auid=0 ses=373 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345989661.223:2974): user pid=31135 uid=0 auid=0 ses=373 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345990201.230:2975): user pid=31201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345990201.230:2976): user pid=31201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345990201.231:2977): pid=31201 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=374 >type=USER_START msg=audit(1345990201.239:2978): user pid=31201 uid=0 auid=0 ses=374 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345990201.294:2979): user pid=31201 uid=0 auid=0 ses=374 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345990201.294:2980): user pid=31201 uid=0 auid=0 ses=374 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345990801.301:2981): user pid=31264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345990801.301:2982): user pid=31264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345990801.301:2983): pid=31264 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=375 >type=USER_START msg=audit(1345990801.306:2984): user pid=31264 uid=0 auid=0 ses=375 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345990801.377:2985): user pid=31264 uid=0 auid=0 ses=375 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345990801.377:2986): user pid=31264 uid=0 auid=0 ses=375 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345991401.383:2987): user pid=31327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345991401.383:2988): user pid=31327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345991401.384:2989): pid=31327 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=376 >type=USER_START msg=audit(1345991401.393:2990): user pid=31327 uid=0 auid=0 ses=376 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345991401.421:2991): user pid=31327 uid=0 auid=0 ses=376 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345991401.422:2992): user pid=31327 uid=0 auid=0 ses=376 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345992001.428:2993): user pid=31390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345992001.428:2994): user pid=31390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345992001.429:2995): pid=31390 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=377 >type=USER_START msg=audit(1345992001.438:2996): user pid=31390 uid=0 auid=0 ses=377 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345992001.505:2997): user pid=31390 uid=0 auid=0 ses=377 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345992001.505:2998): user pid=31390 uid=0 auid=0 ses=377 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345992601.511:2999): user pid=31454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345992601.512:3000): user pid=31454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345992601.512:3001): pid=31454 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=378 >type=USER_START msg=audit(1345992601.521:3002): user pid=31454 uid=0 auid=0 ses=378 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345992601.564:3003): user pid=31454 uid=0 auid=0 ses=378 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345992601.564:3004): user pid=31454 uid=0 auid=0 ses=378 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345993201.571:3005): user pid=31517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345993201.571:3006): user pid=31517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345993201.571:3007): pid=31517 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=379 >type=USER_START msg=audit(1345993201.576:3008): user pid=31517 uid=0 auid=0 ses=379 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345993201.633:3009): user pid=31517 uid=0 auid=0 ses=379 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345993201.633:3010): user pid=31517 uid=0 auid=0 ses=379 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345993261.638:3011): user pid=31526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345993261.638:3012): user pid=31526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345993261.639:3013): pid=31526 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=380 >type=USER_START msg=audit(1345993261.643:3014): user pid=31526 uid=0 auid=0 ses=380 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345993261.654:3015): user pid=31526 uid=0 auid=0 ses=380 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345993261.654:3016): user pid=31526 uid=0 auid=0 ses=380 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345993801.661:3017): user pid=31592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345993801.661:3018): user pid=31592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345993801.662:3019): pid=31592 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=381 >type=USER_START msg=audit(1345993801.666:3020): user pid=31592 uid=0 auid=0 ses=381 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345993801.731:3021): user pid=31592 uid=0 auid=0 ses=381 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345993801.731:3022): user pid=31592 uid=0 auid=0 ses=381 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345994401.737:3023): user pid=31676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345994401.738:3024): user pid=31676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345994401.738:3025): pid=31676 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=382 >type=USER_START msg=audit(1345994401.747:3026): user pid=31676 uid=0 auid=0 ses=382 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345994401.777:3027): user pid=31676 uid=0 auid=0 ses=382 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345994401.777:3028): user pid=31676 uid=0 auid=0 ses=382 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345995001.784:3029): user pid=31739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345995001.784:3030): user pid=31739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345995001.784:3031): pid=31739 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=383 >type=USER_START msg=audit(1345995001.793:3032): user pid=31739 uid=0 auid=0 ses=383 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345995001.852:3033): user pid=31739 uid=0 auid=0 ses=383 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345995001.852:3034): user pid=31739 uid=0 auid=0 ses=383 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345995601.859:3035): user pid=31802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345995601.859:3036): user pid=31802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345995601.860:3037): pid=31802 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=384 >type=USER_START msg=audit(1345995601.868:3038): user pid=31802 uid=0 auid=0 ses=384 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345995601.958:3039): user pid=31802 uid=0 auid=0 ses=384 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345995601.958:3040): user pid=31802 uid=0 auid=0 ses=384 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345996201.965:3041): user pid=31865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345996201.965:3042): user pid=31865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345996201.966:3043): pid=31865 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=385 >type=USER_START msg=audit(1345996201.970:3044): user pid=31865 uid=0 auid=0 ses=385 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345996202.007:3045): user pid=31865 uid=0 auid=0 ses=385 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345996202.007:3046): user pid=31865 uid=0 auid=0 ses=385 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345996381.013:3047): user pid=31886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345996381.013:3048): user pid=31886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345996381.013:3049): pid=31886 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=386 >type=USER_START msg=audit(1345996381.022:3050): user pid=31886 uid=0 auid=0 ses=386 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345996381.079:3051): user pid=31886 uid=0 auid=0 ses=386 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345996381.079:3052): user pid=31886 uid=0 auid=0 ses=386 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345996801.085:3053): user pid=31937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345996801.085:3054): user pid=31937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345996801.085:3055): pid=31937 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=387 >type=USER_START msg=audit(1345996801.090:3056): user pid=31937 uid=0 auid=0 ses=387 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345996801.138:3057): user pid=31937 uid=0 auid=0 ses=387 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345996801.138:3058): user pid=31937 uid=0 auid=0 ses=387 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345996861.142:3059): user pid=31946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345996861.143:3060): user pid=31946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345996861.143:3061): pid=31946 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=388 >type=USER_START msg=audit(1345996861.152:3062): user pid=31946 uid=0 auid=0 ses=388 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345996861.179:3063): user pid=31946 uid=0 auid=0 ses=388 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345996861.179:3064): user pid=31946 uid=0 auid=0 ses=388 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345997401.185:3065): user pid=32016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345997401.186:3066): user pid=32016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345997401.186:3067): pid=32016 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=389 >type=USER_START msg=audit(1345997401.195:3068): user pid=32016 uid=0 auid=0 ses=389 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345997401.237:3069): user pid=32016 uid=0 auid=0 ses=389 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345997401.237:3070): user pid=32016 uid=0 auid=0 ses=389 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345998001.244:3071): user pid=32079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345998001.244:3072): user pid=32079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345998001.244:3073): pid=32079 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=390 >type=USER_START msg=audit(1345998001.253:3074): user pid=32079 uid=0 auid=0 ses=390 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345998001.270:3075): user pid=32079 uid=0 auid=0 ses=390 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345998001.270:3076): user pid=32079 uid=0 auid=0 ses=390 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345998601.276:3077): user pid=32143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345998601.276:3078): user pid=32143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345998601.281:3079): pid=32143 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=391 >type=USER_START msg=audit(1345998601.290:3080): user pid=32143 uid=0 auid=0 ses=391 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345998601.349:3081): user pid=32143 uid=0 auid=0 ses=391 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345998601.349:3082): user pid=32143 uid=0 auid=0 ses=391 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345999201.356:3083): user pid=32206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345999201.356:3084): user pid=32206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345999201.356:3085): pid=32206 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=392 >type=USER_START msg=audit(1345999201.361:3086): user pid=32206 uid=0 auid=0 ses=392 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345999201.422:3087): user pid=32206 uid=0 auid=0 ses=392 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345999201.422:3088): user pid=32206 uid=0 auid=0 ses=392 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1345999801.428:3089): user pid=32269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1345999801.428:3090): user pid=32269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1345999801.429:3091): pid=32269 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=393 >type=USER_START msg=audit(1345999801.434:3092): user pid=32269 uid=0 auid=0 ses=393 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1345999801.458:3093): user pid=32269 uid=0 auid=0 ses=393 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1345999801.458:3094): user pid=32269 uid=0 auid=0 ses=393 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346000401.465:3095): user pid=32332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346000401.465:3096): user pid=32332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346000401.466:3097): pid=32332 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=394 >type=USER_START msg=audit(1346000401.471:3098): user pid=32332 uid=0 auid=0 ses=394 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346000401.518:3099): user pid=32332 uid=0 auid=0 ses=394 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346000401.518:3100): user pid=32332 uid=0 auid=0 ses=394 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346000461.523:3101): user pid=32341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346000461.523:3102): user pid=32341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346000461.523:3103): pid=32341 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=395 >type=USER_START msg=audit(1346000461.528:3104): user pid=32341 uid=0 auid=0 ses=395 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346000461.544:3105): user pid=32341 uid=0 auid=0 ses=395 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346000461.545:3106): user pid=32341 uid=0 auid=0 ses=395 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346001001.551:3107): user pid=32432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346001001.551:3108): user pid=32432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346001001.553:3109): pid=32432 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=396 >type=USER_START msg=audit(1346001001.559:3110): user pid=32432 uid=0 auid=0 ses=396 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346001001.616:3111): user pid=32432 uid=0 auid=0 ses=396 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346001001.616:3112): user pid=32432 uid=0 auid=0 ses=396 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346001601.622:3113): user pid=32495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346001601.623:3114): user pid=32495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346001601.623:3115): pid=32495 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=397 >type=USER_START msg=audit(1346001601.630:3116): user pid=32495 uid=0 auid=0 ses=397 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346001601.655:3117): user pid=32495 uid=0 auid=0 ses=397 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346001601.655:3118): user pid=32495 uid=0 auid=0 ses=397 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346002201.662:3119): user pid=32559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346002201.662:3120): user pid=32559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346002201.662:3121): pid=32559 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=398 >type=USER_START msg=audit(1346002201.669:3122): user pid=32559 uid=0 auid=0 ses=398 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346002201.736:3123): user pid=32559 uid=0 auid=0 ses=398 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346002201.736:3124): user pid=32559 uid=0 auid=0 ses=398 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346002801.743:3125): user pid=32622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346002801.743:3126): user pid=32622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346002801.743:3127): pid=32622 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=399 >type=USER_START msg=audit(1346002801.750:3128): user pid=32622 uid=0 auid=0 ses=399 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346002801.781:3129): user pid=32622 uid=0 auid=0 ses=399 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346002801.781:3130): user pid=32622 uid=0 auid=0 ses=399 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346003401.787:3131): user pid=32685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346003401.787:3132): user pid=32685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346003401.788:3133): pid=32685 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=400 >type=USER_START msg=audit(1346003401.795:3134): user pid=32685 uid=0 auid=0 ses=400 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346003401.848:3135): user pid=32685 uid=0 auid=0 ses=400 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346003401.848:3136): user pid=32685 uid=0 auid=0 ses=400 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346004001.854:3137): user pid=32748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346004001.855:3138): user pid=32748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346004001.855:3139): pid=32748 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=401 >type=USER_START msg=audit(1346004001.862:3140): user pid=32748 uid=0 auid=0 ses=401 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346004001.922:3141): user pid=32748 uid=0 auid=0 ses=401 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346004001.922:3142): user pid=32748 uid=0 auid=0 ses=401 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346004061.926:3143): user pid=32757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346004061.926:3144): user pid=32757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346004061.927:3145): pid=32757 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=402 >type=USER_START msg=audit(1346004061.934:3146): user pid=32757 uid=0 auid=0 ses=402 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346004061.952:3147): user pid=32757 uid=0 auid=0 ses=402 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346004061.952:3148): user pid=32757 uid=0 auid=0 ses=402 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346004601.958:3149): user pid=364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346004601.958:3150): user pid=364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346004601.959:3151): pid=364 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=403 >type=USER_START msg=audit(1346004601.966:3152): user pid=364 uid=0 auid=0 ses=403 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346004601.985:3153): user pid=364 uid=0 auid=0 ses=403 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346004601.985:3154): user pid=364 uid=0 auid=0 ses=403 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346005201.992:3155): user pid=433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346005201.992:3156): user pid=433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346005201.993:3157): pid=433 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=404 >type=USER_START msg=audit(1346005202.000:3158): user pid=433 uid=0 auid=0 ses=404 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346005202.051:3159): user pid=433 uid=0 auid=0 ses=404 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346005202.051:3160): user pid=433 uid=0 auid=0 ses=404 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346005801.057:3161): user pid=497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346005801.057:3162): user pid=497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346005801.058:3163): pid=497 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=405 >type=USER_START msg=audit(1346005801.065:3164): user pid=497 uid=0 auid=0 ses=405 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346005801.132:3165): user pid=497 uid=0 auid=0 ses=405 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346005801.132:3166): user pid=497 uid=0 auid=0 ses=405 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346006401.138:3167): user pid=560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346006401.138:3168): user pid=560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346006401.139:3169): pid=560 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=406 >type=USER_START msg=audit(1346006401.146:3170): user pid=560 uid=0 auid=0 ses=406 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346006401.165:3171): user pid=560 uid=0 auid=0 ses=406 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346006401.165:3172): user pid=560 uid=0 auid=0 ses=406 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346007001.172:3173): user pid=623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346007001.172:3174): user pid=623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346007001.173:3175): pid=623 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=407 >type=USER_START msg=audit(1346007001.180:3176): user pid=623 uid=0 auid=0 ses=407 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346007001.228:3177): user pid=623 uid=0 auid=0 ses=407 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346007001.228:3178): user pid=623 uid=0 auid=0 ses=407 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346007601.236:3179): user pid=708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346007601.236:3180): user pid=708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346007601.237:3181): pid=708 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=408 >type=USER_START msg=audit(1346007601.246:3182): user pid=708 uid=0 auid=0 ses=408 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346007601.284:3183): user pid=708 uid=0 auid=0 ses=408 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346007601.284:3184): user pid=708 uid=0 auid=0 ses=408 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346007661.289:3185): user pid=717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346007661.289:3186): user pid=717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346007661.289:3187): pid=717 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=409 >type=USER_START msg=audit(1346007661.296:3188): user pid=717 uid=0 auid=0 ses=409 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346007661.313:3189): user pid=717 uid=0 auid=0 ses=409 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346007661.313:3190): user pid=717 uid=0 auid=0 ses=409 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346008201.320:3191): user pid=787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346008201.320:3192): user pid=787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346008201.320:3193): pid=787 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=410 >type=USER_START msg=audit(1346008201.331:3194): user pid=787 uid=0 auid=0 ses=410 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346008201.390:3195): user pid=787 uid=0 auid=0 ses=410 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346008201.390:3196): user pid=787 uid=0 auid=0 ses=410 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346008801.396:3197): user pid=850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346008801.396:3198): user pid=850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346008801.397:3199): pid=850 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=411 >type=USER_START msg=audit(1346008801.408:3200): user pid=850 uid=0 auid=0 ses=411 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346008801.471:3201): user pid=850 uid=0 auid=0 ses=411 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346008801.471:3202): user pid=850 uid=0 auid=0 ses=411 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346009401.478:3203): user pid=913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346009401.478:3204): user pid=913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346009401.478:3205): pid=913 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=412 >type=USER_START msg=audit(1346009401.485:3206): user pid=913 uid=0 auid=0 ses=412 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346009401.504:3207): user pid=913 uid=0 auid=0 ses=412 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346009401.504:3208): user pid=913 uid=0 auid=0 ses=412 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346010001.527:3209): user pid=1203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346010001.527:3210): user pid=1203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346010001.533:3211): pid=1203 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=413 >type=USER_START msg=audit(1346010001.541:3212): user pid=1203 uid=0 auid=0 ses=413 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346010001.619:3213): user pid=1203 uid=0 auid=0 ses=413 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346010001.619:3214): user pid=1203 uid=0 auid=0 ses=413 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346010601.629:3215): user pid=1267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346010601.629:3216): user pid=1267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346010601.631:3217): pid=1267 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=414 >type=USER_START msg=audit(1346010601.641:3218): user pid=1267 uid=0 auid=0 ses=414 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346010601.700:3219): user pid=1267 uid=0 auid=0 ses=414 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346010601.700:3220): user pid=1267 uid=0 auid=0 ses=414 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346011201.706:3221): user pid=1330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346011201.706:3222): user pid=1330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346011201.707:3223): pid=1330 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=415 >type=USER_START msg=audit(1346011201.716:3224): user pid=1330 uid=0 auid=0 ses=415 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346011201.756:3225): user pid=1330 uid=0 auid=0 ses=415 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346011201.756:3226): user pid=1330 uid=0 auid=0 ses=415 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346011261.760:3227): user pid=1339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346011261.760:3228): user pid=1339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346011261.761:3229): pid=1339 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=416 >type=USER_START msg=audit(1346011261.770:3230): user pid=1339 uid=0 auid=0 ses=416 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346011261.787:3231): user pid=1339 uid=0 auid=0 ses=416 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346011261.787:3232): user pid=1339 uid=0 auid=0 ses=416 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346011801.794:3233): user pid=1405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346011801.794:3234): user pid=1405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346011801.794:3235): pid=1405 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=417 >type=USER_START msg=audit(1346011801.801:3236): user pid=1405 uid=0 auid=0 ses=417 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346011801.870:3237): user pid=1405 uid=0 auid=0 ses=417 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346011801.870:3238): user pid=1405 uid=0 auid=0 ses=417 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346012401.876:3239): user pid=1470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346012401.876:3240): user pid=1470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346012401.877:3241): pid=1470 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=418 >type=USER_START msg=audit(1346012401.888:3242): user pid=1470 uid=0 auid=0 ses=418 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346012401.929:3243): user pid=1470 uid=0 auid=0 ses=418 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346012401.929:3244): user pid=1470 uid=0 auid=0 ses=418 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346013001.936:3245): user pid=1544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346013001.936:3246): user pid=1544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346013001.936:3247): pid=1544 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=419 >type=USER_START msg=audit(1346013001.947:3248): user pid=1544 uid=0 auid=0 ses=419 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346013002.025:3249): user pid=1544 uid=0 auid=0 ses=419 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346013002.025:3250): user pid=1544 uid=0 auid=0 ses=419 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346013601.031:3251): user pid=1607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346013601.032:3252): user pid=1607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346013601.032:3253): pid=1607 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=420 >type=USER_START msg=audit(1346013601.043:3254): user pid=1607 uid=0 auid=0 ses=420 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346013601.123:3255): user pid=1607 uid=0 auid=0 ses=420 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346013601.123:3256): user pid=1607 uid=0 auid=0 ses=420 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346014201.129:3257): user pid=1676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346014201.129:3258): user pid=1676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346014201.129:3259): pid=1676 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=421 >type=USER_START msg=audit(1346014201.137:3260): user pid=1676 uid=0 auid=0 ses=421 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346014201.150:3261): user pid=1676 uid=0 auid=0 ses=421 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346014201.150:3262): user pid=1676 uid=0 auid=0 ses=421 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346014801.160:3263): user pid=1769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346014801.160:3264): user pid=1769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346014801.161:3265): pid=1769 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=422 >type=USER_START msg=audit(1346014801.173:3266): user pid=1769 uid=0 auid=0 ses=422 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346014801.226:3267): user pid=1769 uid=0 auid=0 ses=422 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346014801.226:3268): user pid=1769 uid=0 auid=0 ses=422 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346014861.231:3269): user pid=1778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346014861.231:3270): user pid=1778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346014861.232:3271): pid=1778 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=423 >type=USER_START msg=audit(1346014861.243:3272): user pid=1778 uid=0 auid=0 ses=423 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346014861.255:3273): user pid=1778 uid=0 auid=0 ses=423 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346014861.255:3274): user pid=1778 uid=0 auid=0 ses=423 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346015401.262:3275): user pid=1847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346015401.262:3276): user pid=1847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346015401.262:3277): pid=1847 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=424 >type=USER_START msg=audit(1346015401.271:3278): user pid=1847 uid=0 auid=0 ses=424 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346015401.324:3279): user pid=1847 uid=0 auid=0 ses=424 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346015401.324:3280): user pid=1847 uid=0 auid=0 ses=424 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346016001.331:3281): user pid=1914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346016001.331:3282): user pid=1914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346016001.331:3283): pid=1914 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=425 >type=USER_START msg=audit(1346016001.336:3284): user pid=1914 uid=0 auid=0 ses=425 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346016001.381:3285): user pid=1914 uid=0 auid=0 ses=425 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346016001.381:3286): user pid=1914 uid=0 auid=0 ses=425 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346016601.394:3287): user pid=1983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346016601.394:3288): user pid=1983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346016601.394:3289): pid=1983 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=426 >type=USER_START msg=audit(1346016601.400:3290): user pid=1983 uid=0 auid=0 ses=426 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346016601.479:3291): user pid=1983 uid=0 auid=0 ses=426 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346016601.479:3292): user pid=1983 uid=0 auid=0 ses=426 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346017201.485:3293): user pid=2047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346017201.486:3294): user pid=2047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346017201.486:3295): pid=2047 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=427 >type=USER_START msg=audit(1346017201.491:3296): user pid=2047 uid=0 auid=0 ses=427 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346017201.514:3297): user pid=2047 uid=0 auid=0 ses=427 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346017201.514:3298): user pid=2047 uid=0 auid=0 ses=427 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346017801.521:3299): user pid=2110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346017801.521:3300): user pid=2110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346017801.522:3301): pid=2110 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=428 >type=USER_START msg=audit(1346017801.531:3302): user pid=2110 uid=0 auid=0 ses=428 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346017801.599:3303): user pid=2110 uid=0 auid=0 ses=428 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346017801.599:3304): user pid=2110 uid=0 auid=0 ses=428 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346018401.606:3305): user pid=2173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346018401.606:3306): user pid=2173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346018401.606:3307): pid=2173 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=429 >type=USER_START msg=audit(1346018401.615:3308): user pid=2173 uid=0 auid=0 ses=429 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346018401.680:3309): user pid=2173 uid=0 auid=0 ses=429 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346018401.680:3310): user pid=2173 uid=0 auid=0 ses=429 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346018461.685:3311): user pid=2182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346018461.685:3312): user pid=2182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346018461.685:3313): pid=2182 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=430 >type=USER_START msg=audit(1346018461.691:3314): user pid=2182 uid=0 auid=0 ses=430 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346018461.703:3315): user pid=2182 uid=0 auid=0 ses=430 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346018461.703:3316): user pid=2182 uid=0 auid=0 ses=430 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346019001.709:3317): user pid=2248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346019001.710:3318): user pid=2248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346019001.710:3319): pid=2248 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=431 >type=USER_START msg=audit(1346019001.719:3320): user pid=2248 uid=0 auid=0 ses=431 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346019001.736:3321): user pid=2248 uid=0 auid=0 ses=431 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346019001.736:3322): user pid=2248 uid=0 auid=0 ses=431 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346019601.743:3323): user pid=2311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346019601.743:3324): user pid=2311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346019601.743:3325): pid=2311 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=432 >type=USER_START msg=audit(1346019601.748:3326): user pid=2311 uid=0 auid=0 ses=432 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346019601.810:3327): user pid=2311 uid=0 auid=0 ses=432 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346019601.810:3328): user pid=2311 uid=0 auid=0 ses=432 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346020201.821:3329): user pid=2396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346020201.821:3330): user pid=2396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346020201.822:3331): pid=2396 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=433 >type=USER_START msg=audit(1346020201.830:3332): user pid=2396 uid=0 auid=0 ses=433 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346020201.845:3333): user pid=2396 uid=0 auid=0 ses=433 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346020201.845:3334): user pid=2396 uid=0 auid=0 ses=433 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346020801.852:3335): user pid=2459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346020801.852:3336): user pid=2459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346020801.853:3337): pid=2459 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=434 >type=USER_START msg=audit(1346020801.861:3338): user pid=2459 uid=0 auid=0 ses=434 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346020801.947:3339): user pid=2459 uid=0 auid=0 ses=434 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346020801.947:3340): user pid=2459 uid=0 auid=0 ses=434 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346021401.954:3341): user pid=2522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346021401.954:3342): user pid=2522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346021401.954:3343): pid=2522 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=435 >type=USER_START msg=audit(1346021401.959:3344): user pid=2522 uid=0 auid=0 ses=435 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346021402.036:3345): user pid=2522 uid=0 auid=0 ses=435 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346021402.036:3346): user pid=2522 uid=0 auid=0 ses=435 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346022001.043:3347): user pid=2601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346022001.043:3348): user pid=2601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346022001.043:3349): pid=2601 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=436 >type=USER_START msg=audit(1346022001.052:3350): user pid=2601 uid=0 auid=0 ses=436 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346022001.092:3351): user pid=2601 uid=0 auid=0 ses=436 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346022001.092:3352): user pid=2601 uid=0 auid=0 ses=436 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346022061.096:3353): user pid=2610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346022061.096:3354): user pid=2610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346022061.097:3355): pid=2610 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=437 >type=USER_START msg=audit(1346022061.102:3356): user pid=2610 uid=0 auid=0 ses=437 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346022061.113:3357): user pid=2610 uid=0 auid=0 ses=437 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346022061.113:3358): user pid=2610 uid=0 auid=0 ses=437 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346022601.120:3359): user pid=2677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346022601.120:3360): user pid=2677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346022601.120:3361): pid=2677 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=438 >type=USER_START msg=audit(1346022601.125:3362): user pid=2677 uid=0 auid=0 ses=438 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346022601.191:3363): user pid=2677 uid=0 auid=0 ses=438 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346022601.191:3364): user pid=2677 uid=0 auid=0 ses=438 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346023201.197:3365): user pid=2746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346023201.198:3366): user pid=2746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346023201.198:3367): pid=2746 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=439 >type=USER_START msg=audit(1346023201.203:3368): user pid=2746 uid=0 auid=0 ses=439 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346023201.255:3369): user pid=2746 uid=0 auid=0 ses=439 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346023201.255:3370): user pid=2746 uid=0 auid=0 ses=439 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346023801.262:3371): user pid=2809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346023801.262:3372): user pid=2809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346023801.262:3373): pid=2809 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=440 >type=USER_START msg=audit(1346023801.267:3374): user pid=2809 uid=0 auid=0 ses=440 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346023801.288:3375): user pid=2809 uid=0 auid=0 ses=440 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346023801.289:3376): user pid=2809 uid=0 auid=0 ses=440 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346024401.295:3377): user pid=2872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346024401.295:3378): user pid=2872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346024401.296:3379): pid=2872 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=441 >type=USER_START msg=audit(1346024401.305:3380): user pid=2872 uid=0 auid=0 ses=441 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346024401.367:3381): user pid=2872 uid=0 auid=0 ses=441 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346024401.367:3382): user pid=2872 uid=0 auid=0 ses=441 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346025001.374:3383): user pid=2935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346025001.374:3384): user pid=2935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346025001.374:3385): pid=2935 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=442 >type=USER_START msg=audit(1346025001.379:3386): user pid=2935 uid=0 auid=0 ses=442 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346025001.397:3387): user pid=2935 uid=0 auid=0 ses=442 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346025001.398:3388): user pid=2935 uid=0 auid=0 ses=442 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346025601.404:3389): user pid=2998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346025601.404:3390): user pid=2998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346025601.405:3391): pid=2998 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=443 >type=USER_START msg=audit(1346025601.408:3392): user pid=2998 uid=0 auid=0 ses=443 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346025601.471:3393): user pid=2998 uid=0 auid=0 ses=443 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346025601.471:3394): user pid=2998 uid=0 auid=0 ses=443 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346025661.475:3395): user pid=3007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346025661.475:3396): user pid=3007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346025661.476:3397): pid=3007 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=444 >type=USER_START msg=audit(1346025661.479:3398): user pid=3007 uid=0 auid=0 ses=444 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346025661.490:3399): user pid=3007 uid=0 auid=0 ses=444 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346025661.490:3400): user pid=3007 uid=0 auid=0 ses=444 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346026201.497:3401): user pid=3094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346026201.497:3402): user pid=3094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346026201.498:3403): pid=3094 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=445 >type=USER_START msg=audit(1346026201.506:3404): user pid=3094 uid=0 auid=0 ses=445 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346026201.561:3405): user pid=3094 uid=0 auid=0 ses=445 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346026201.561:3406): user pid=3094 uid=0 auid=0 ses=445 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346026801.568:3407): user pid=3157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346026801.568:3408): user pid=3157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346026801.568:3409): pid=3157 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=446 >type=USER_START msg=audit(1346026801.573:3410): user pid=3157 uid=0 auid=0 ses=446 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346026801.594:3411): user pid=3157 uid=0 auid=0 ses=446 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346026801.594:3412): user pid=3157 uid=0 auid=0 ses=446 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346027401.601:3413): user pid=3220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346027401.601:3414): user pid=3220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346027401.602:3415): pid=3220 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=447 >type=USER_START msg=audit(1346027401.607:3416): user pid=3220 uid=0 auid=0 ses=447 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346027401.673:3417): user pid=3220 uid=0 auid=0 ses=447 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346027401.673:3418): user pid=3220 uid=0 auid=0 ses=447 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346028001.679:3419): user pid=3283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346028001.680:3420): user pid=3283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346028001.680:3421): pid=3283 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=448 >type=USER_START msg=audit(1346028001.689:3422): user pid=3283 uid=0 auid=0 ses=448 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346028001.746:3423): user pid=3283 uid=0 auid=0 ses=448 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346028001.746:3424): user pid=3283 uid=0 auid=0 ses=448 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346028601.752:3425): user pid=3347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346028601.752:3426): user pid=3347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346028601.753:3427): pid=3347 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=449 >type=USER_START msg=audit(1346028601.758:3428): user pid=3347 uid=0 auid=0 ses=449 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346028601.782:3429): user pid=3347 uid=0 auid=0 ses=449 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346028601.783:3430): user pid=3347 uid=0 auid=0 ses=449 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346029201.789:3431): user pid=3410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346029201.789:3432): user pid=3410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346029201.790:3433): pid=3410 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=450 >type=USER_START msg=audit(1346029201.795:3434): user pid=3410 uid=0 auid=0 ses=450 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346029201.858:3435): user pid=3410 uid=0 auid=0 ses=450 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346029201.858:3436): user pid=3410 uid=0 auid=0 ses=450 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346029261.863:3437): user pid=3419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346029261.863:3438): user pid=3419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346029261.863:3439): pid=3419 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=451 >type=USER_START msg=audit(1346029261.868:3440): user pid=3419 uid=0 auid=0 ses=451 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346029261.879:3441): user pid=3419 uid=0 auid=0 ses=451 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346029261.879:3442): user pid=3419 uid=0 auid=0 ses=451 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346029801.886:3443): user pid=3485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346029801.886:3444): user pid=3485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346029801.887:3445): pid=3485 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=452 >type=USER_START msg=audit(1346029801.891:3446): user pid=3485 uid=0 auid=0 ses=452 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346029801.916:3447): user pid=3485 uid=0 auid=0 ses=452 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346029801.916:3448): user pid=3485 uid=0 auid=0 ses=452 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346030401.923:3449): user pid=3548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346030401.923:3450): user pid=3548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346030401.924:3451): pid=3548 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=453 >type=USER_START msg=audit(1346030401.933:3452): user pid=3548 uid=0 auid=0 ses=453 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346030402.003:3453): user pid=3548 uid=0 auid=0 ses=453 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346030402.003:3454): user pid=3548 uid=0 auid=0 ses=453 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346031001.010:3455): user pid=3612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346031001.010:3456): user pid=3612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346031001.010:3457): pid=3612 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=454 >type=USER_START msg=audit(1346031001.015:3458): user pid=3612 uid=0 auid=0 ses=454 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346031001.084:3459): user pid=3612 uid=0 auid=0 ses=454 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346031001.084:3460): user pid=3612 uid=0 auid=0 ses=454 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346031601.091:3461): user pid=3675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346031601.091:3462): user pid=3675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346031601.091:3463): pid=3675 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=455 >type=USER_START msg=audit(1346031601.096:3464): user pid=3675 uid=0 auid=0 ses=455 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346031601.140:3465): user pid=3675 uid=0 auid=0 ses=455 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346031601.140:3466): user pid=3675 uid=0 auid=0 ses=455 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346032201.147:3467): user pid=3759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346032201.147:3468): user pid=3759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346032201.147:3469): pid=3759 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=456 >type=USER_START msg=audit(1346032201.152:3470): user pid=3759 uid=0 auid=0 ses=456 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346032201.205:3471): user pid=3759 uid=0 auid=0 ses=456 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346032201.205:3472): user pid=3759 uid=0 auid=0 ses=456 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346032801.211:3473): user pid=3822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346032801.211:3474): user pid=3822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346032801.212:3475): pid=3822 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=457 >type=USER_START msg=audit(1346032801.217:3476): user pid=3822 uid=0 auid=0 ses=457 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346032801.270:3477): user pid=3822 uid=0 auid=0 ses=457 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346032801.270:3478): user pid=3822 uid=0 auid=0 ses=457 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346032861.275:3479): user pid=3831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346032861.275:3480): user pid=3831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346032861.276:3481): pid=3831 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=458 >type=USER_START msg=audit(1346032861.280:3482): user pid=3831 uid=0 auid=0 ses=458 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346032861.291:3483): user pid=3831 uid=0 auid=0 ses=458 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346032861.291:3484): user pid=3831 uid=0 auid=0 ses=458 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRYPTO_KEY_USER msg=audit(1346033150.585:3485): user pid=3875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=3875 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346033150.586:3486): user pid=3875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=3875 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346033150.587:3487): user pid=3874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=3875 suid=74 rport=55108 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346033150.587:3488): user pid=3874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=3875 suid=74 rport=55108 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346033154.375:3489): user pid=3874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3875 suid=74 rport=55108 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_ERR msg=audit(1346033154.375:3490): user pid=3874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident acct="?" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=failed' >type=CRYPTO_KEY_USER msg=audit(1346033154.375:3491): user pid=3874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=3874 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346033154.376:3492): user pid=3874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=3874 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_LOGIN msg=audit(1346033154.376:3493): user pid=3874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=CRYPTO_KEY_USER msg=audit(1346033156.173:3494): user pid=3877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=3877 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346033156.173:3495): user pid=3877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=3877 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346033156.173:3496): user pid=3876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=3877 suid=74 rport=55110 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346033156.174:3497): user pid=3876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=3877 suid=74 rport=55110 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346033159.662:3498): user pid=3876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1346033162.973:3499): user pid=3876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1346033162.976:3500): user pid=3876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346033162.976:3501): user pid=3876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3877 suid=74 rport=55110 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346033162.977:3502): user pid=3876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1346033162.978:3503): user pid=3876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1346033162.978:3504): pid=3876 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=459 >type=USER_ROLE_CHANGE msg=audit(1346033163.053:3505): user pid=3876 uid=0 auid=0 ses=459 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346033163.055:3506): user pid=3876 uid=0 auid=0 ses=459 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1346033163.082:3507): user pid=3880 uid=0 auid=0 ses=459 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1346033163.082:3508): user pid=3880 uid=0 auid=0 ses=459 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1346033163.082:3509): user pid=3880 uid=0 auid=0 ses=459 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=3880 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1346033163.082:3510): user pid=3880 uid=0 auid=0 ses=459 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=3880 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1346033163.083:3511): user pid=3880 uid=0 auid=0 ses=459 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=NETFILTER_CFG msg=audit(1346033215.438:3512): table=nat family=2 entries=7 >type=SYSCALL msg=audit(1346033215.438:3512): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=21ff800 items=0 ppid=3930 pid=3943 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=459 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1346033215.442:3513): table=nat family=2 entries=6 >type=SYSCALL msg=audit(1346033215.442:3513): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=17f8800 items=0 ppid=3930 pid=3944 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=459 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1346033215.444:3514): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1346033215.444:3514): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=25935e0 items=0 ppid=3930 pid=3945 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=459 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1346033215.446:3515): table=filter family=2 entries=13 >type=SYSCALL msg=audit(1346033215.446:3515): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=151c610 items=0 ppid=3930 pid=3946 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=459 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1346033215.448:3516): table=filter family=2 entries=12 >type=SYSCALL msg=audit(1346033215.448:3516): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1dac9e0 items=0 ppid=3930 pid=3947 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=459 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1346033215.451:3517): table=filter family=2 entries=11 >type=SYSCALL msg=audit(1346033215.451:3517): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=a69860 items=0 ppid=3930 pid=3948 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=459 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1346033215.453:3518): table=filter family=2 entries=10 >type=SYSCALL msg=audit(1346033215.453:3518): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=a35b30 items=0 ppid=3930 pid=3949 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=459 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1346033215.455:3519): table=filter family=2 entries=9 >type=SYSCALL msg=audit(1346033215.455:3519): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=140f9b0 items=0 ppid=3930 pid=3950 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=459 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1346033215.457:3520): table=filter family=2 entries=8 >type=SYSCALL msg=audit(1346033215.457:3520): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1457090 items=0 ppid=3930 pid=3951 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=459 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1346033215.460:3521): table=filter family=2 entries=7 >type=SYSCALL msg=audit(1346033215.460:3521): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=18e47f0 items=0 ppid=3930 pid=3952 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=459 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1346033215.462:3522): table=mangle family=2 entries=7 >type=SYSCALL msg=audit(1346033215.462:3522): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=a0a290 items=0 ppid=3930 pid=3953 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=459 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1346033215.464:3523): table=filter family=2 entries=6 >type=SYSCALL msg=audit(1346033215.464:3523): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=24f07f0 items=0 ppid=3930 pid=3954 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=459 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1346033215.466:3524): table=filter family=2 entries=5 >type=SYSCALL msg=audit(1346033215.466:3524): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=23e97f0 items=0 ppid=3930 pid=3955 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=459 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1346033215.468:3525): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1346033215.468:3525): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=16677f0 items=0 ppid=3930 pid=3956 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=459 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1346033215.470:3526): table=filter family=2 entries=5 >type=SYSCALL msg=audit(1346033215.470:3526): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=112a7f0 items=0 ppid=3930 pid=3957 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=459 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1346033215.472:3527): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1346033215.472:3527): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1862290 items=0 ppid=3930 pid=3958 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=459 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1346033215.474:3528): table=filter family=2 entries=6 >type=SYSCALL msg=audit(1346033215.474:3528): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=159be50 items=0 ppid=3930 pid=3959 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=459 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1346033215.476:3529): table=filter family=2 entries=7 >type=SYSCALL msg=audit(1346033215.476:3529): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=9bcfc0 items=0 ppid=3930 pid=3960 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=459 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1346033215.478:3530): table=filter family=2 entries=8 >type=SYSCALL msg=audit(1346033215.478:3530): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=d1a920 items=0 ppid=3930 pid=3961 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=459 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1346033215.480:3531): table=filter family=2 entries=9 >type=SYSCALL msg=audit(1346033215.480:3531): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=111da90 items=0 ppid=3930 pid=3962 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=459 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1346033215.482:3532): table=filter family=2 entries=10 >type=SYSCALL msg=audit(1346033215.482:3532): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=9707d0 items=0 ppid=3930 pid=3963 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=459 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1346033215.484:3533): table=filter family=2 entries=11 >type=SYSCALL msg=audit(1346033215.484:3533): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=111e940 items=0 ppid=3930 pid=3964 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=459 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1346033215.486:3534): table=filter family=2 entries=12 >type=SYSCALL msg=audit(1346033215.486:3534): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=11b3550 items=0 ppid=3930 pid=3965 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=459 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1346033215.488:3535): table=nat family=2 entries=4 >type=SYSCALL msg=audit(1346033215.488:3535): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=2232620 items=0 ppid=3930 pid=3966 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=459 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1346033215.490:3536): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1346033215.490:3536): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=2517800 items=0 ppid=3930 pid=3967 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=459 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1346033215.492:3537): table=nat family=2 entries=6 >type=SYSCALL msg=audit(1346033215.492:3537): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=103b700 items=0 ppid=3930 pid=3968 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=459 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1346033215.983:3538): table=filter family=10 entries=0 >type=NETFILTER_CFG msg=audit(1346033215.983:3538): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1346033215.983:3538): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1346033215.983:3538): table=mangle family=2 entries=0 >type=SYSCALL msg=audit(1346033215.983:3538): arch=c000003e syscall=56 success=yes exit=4015 a0=6c020011 a1=7f2ca4197a20 a2=8 a3=a7373 items=0 ppid=1 pid=3941 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=459 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=SYSCALL msg=audit(1346033215.983:3539): arch=c000003e syscall=56 success=yes exit=0 a0=6c020011 a1=7f2ca4197a20 a2=8 a3=a7373 items=0 ppid=3941 pid=4015 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=459 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=FD_PAIR msg=audit(1346033215.983:3539): fd0=0 fd1=0 >type=USER_ACCT msg=audit(1346033401.317:3540): user pid=4040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346033401.317:3541): user pid=4040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346033401.324:3542): pid=4040 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=460 >type=USER_START msg=audit(1346033401.334:3543): user pid=4040 uid=0 auid=0 ses=460 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346033401.381:3544): user pid=4040 uid=0 auid=0 ses=460 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346033401.381:3545): user pid=4040 uid=0 auid=0 ses=460 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=MAC_CONFIG_CHANGE msg=audit(1346033848.698:3546): bool=virt_use_nfs val=1 old_val=0 auid=0 ses=459 >type=SYSCALL msg=audit(1346033848.698:3546): arch=c000003e syscall=1 success=yes exit=2 a0=4 a1=7fffa3166ad0 a2=2 a3=fffffff8 items=0 ppid=3880 pid=4101 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=459 comm="setsebool" exe="/usr/sbin/setsebool" subj=unconfined_u:unconfined_r:setsebool_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1346033891.296:3547): user pid=4111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=4111 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346033891.296:3548): user pid=4111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=4111 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346033891.298:3549): user pid=4110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=4111 suid=74 rport=55187 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346033891.298:3550): user pid=4110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=4111 suid=74 rport=55187 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346033895.761:3551): user pid=4110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1346033899.432:3552): user pid=4110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1346033899.435:3553): user pid=4110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346033899.435:3554): user pid=4110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4111 suid=74 rport=55187 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346033899.436:3555): user pid=4110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1346033899.436:3556): user pid=4110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1346033899.437:3557): pid=4110 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=461 >type=USER_ROLE_CHANGE msg=audit(1346033899.508:3558): user pid=4110 uid=0 auid=0 ses=461 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346033899.510:3559): user pid=4110 uid=0 auid=0 ses=461 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1346033899.512:3560): user pid=4110 uid=0 auid=0 ses=461 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346033899.512:3561): user pid=4110 uid=0 auid=0 ses=461 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346033899.513:3562): user pid=4114 uid=0 auid=0 ses=461 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=4114 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346033899.513:3563): user pid=4114 uid=0 auid=0 ses=461 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=4114 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRED_REFR msg=audit(1346033899.514:3564): user pid=4114 uid=0 auid=0 ses=461 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=VIRT_MACHINE_ID msg=audit(1346033899.702:3565): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346033899.702:3566): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346033899.702:3567): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=none exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346033899.809:3568): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346033899.812:3569): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346033899.813:3570): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346033899.813:3571): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346033899.813:3572): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346033899.813:3573): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346033899.813:3574): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346033899.813:3575): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346033899.814:3576): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346033899.814:3577): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1346033899.814:3578): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346033899.814:3579): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346033899.838:3580): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="macvtap0" rdev=? exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346033899.838:3581): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1346033899.895:3582): avc: denied { read write } for pid=4135 comm="qemu-kvm" path="/dev/tap25" dev=devtmpfs ino=104773 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1346033899.895:3582): arch=c000003e syscall=59 success=yes exit=0 a0=7f2c9c0058f0 a1=7f2c9c006030 a2=7f2c9c004f40 a3=18 items=0 ppid=1 pid=4135 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=459 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1346033899.986:3583): avc: denied { getattr } for pid=4135 comm="qemu-kvm" name="/" dev=0:1b ino=101 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:nfs_t:s0 tclass=filesystem >type=SYSCALL msg=audit(1346033899.986:3583): arch=c000003e syscall=138 success=no exit=-13 a0=9 a1=7fff2ac6a670 a2=3 a3=48 items=0 ppid=1 pid=4135 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=459 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1346033900.229:3584): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-disk="?" new-disk="/mnt/testkf8.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346033900.229:3585): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346033900.229:3586): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346033900.229:3587): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346033900.229:3588): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=migrated vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=4135 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346033905.234:3589): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=failed vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1346033905.377:3590): user pid=4110 uid=0 auid=0 ses=461 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1346033905.377:3591): user pid=4110 uid=0 auid=0 ses=461 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1346033905.378:3592): user pid=4110 uid=0 auid=0 ses=461 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1346033905.378:3593): user pid=4110 uid=0 auid=0 ses=461 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346033905.378:3594): user pid=4110 uid=0 auid=0 ses=461 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=4110 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346033905.378:3595): user pid=4110 uid=0 auid=0 ses=461 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=4110 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346033905.378:3596): user pid=4110 uid=0 auid=0 ses=461 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4110 suid=0 rport=55187 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_ACCT msg=audit(1346034001.414:3597): user pid=4191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346034001.414:3598): user pid=4191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346034001.421:3599): pid=4191 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=462 >type=USER_START msg=audit(1346034001.427:3600): user pid=4191 uid=0 auid=0 ses=462 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346034001.505:3601): user pid=4191 uid=0 auid=0 ses=462 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346034001.505:3602): user pid=4191 uid=0 auid=0 ses=462 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=NETFILTER_CFG msg=audit(1346034060.577:3603): table=filter family=2 entries=13 >type=SYSCALL msg=audit(1346034060.577:3603): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=24e3ff0 items=0 ppid=3880 pid=4200 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=459 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1346034067.222:3604): user pid=4202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=4202 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346034067.222:3605): user pid=4202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=4202 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346034067.223:3606): user pid=4201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=4202 suid=74 rport=55205 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346034067.223:3607): user pid=4201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=4202 suid=74 rport=55205 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346034070.593:3608): user pid=4201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1346034074.105:3609): user pid=4201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1346034074.108:3610): user pid=4201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346034074.108:3611): user pid=4201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4202 suid=74 rport=55205 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346034074.109:3612): user pid=4201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1346034074.109:3613): user pid=4201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1346034074.109:3614): pid=4201 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=463 >type=USER_ROLE_CHANGE msg=audit(1346034074.181:3615): user pid=4201 uid=0 auid=0 ses=463 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346034074.185:3616): user pid=4201 uid=0 auid=0 ses=463 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1346034074.187:3617): user pid=4201 uid=0 auid=0 ses=463 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346034074.187:3618): user pid=4201 uid=0 auid=0 ses=463 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346034074.188:3619): user pid=4205 uid=0 auid=0 ses=463 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=4205 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346034074.188:3620): user pid=4205 uid=0 auid=0 ses=463 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=4205 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRED_REFR msg=audit(1346034074.188:3621): user pid=4205 uid=0 auid=0 ses=463 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=VIRT_MACHINE_ID msg=audit(1346034074.357:3622): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346034074.357:3623): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346034074.357:3624): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=none exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346034074.477:3625): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346034074.479:3626): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346034074.480:3627): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346034074.480:3628): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346034074.480:3629): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346034074.480:3630): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346034074.480:3631): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346034074.480:3632): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346034074.480:3633): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346034074.481:3634): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1346034074.481:3635): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346034074.481:3636): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346034074.508:3637): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="macvtap0" rdev=? exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346034074.508:3638): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1346034074.573:3639): avc: denied { read write } for pid=4225 comm="qemu-kvm" path="/dev/tap26" dev=devtmpfs ino=105252 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1346034074.573:3639): arch=c000003e syscall=59 success=yes exit=0 a0=7f2c84043b50 a1=7f2c84044310 a2=7f2c84043430 a3=18 items=0 ppid=1 pid=4225 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=459 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1346034074.665:3640): avc: denied { getattr } for pid=4225 comm="qemu-kvm" name="/" dev=0:1b ino=101 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:nfs_t:s0 tclass=filesystem >type=SYSCALL msg=audit(1346034074.665:3640): arch=c000003e syscall=138 success=no exit=-13 a0=9 a1=7ffff46aaae0 a2=3 a3=48 items=0 ppid=1 pid=4225 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=459 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1346034074.932:3641): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-disk="?" new-disk="/mnt/testkf8.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346034074.932:3642): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346034074.932:3643): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346034074.932:3644): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346034074.932:3645): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=migrated vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=4225 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346034080.137:3646): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=failed vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1346034080.271:3647): user pid=4201 uid=0 auid=0 ses=463 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1346034080.271:3648): user pid=4201 uid=0 auid=0 ses=463 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1346034080.272:3649): user pid=4201 uid=0 auid=0 ses=463 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1346034080.272:3650): user pid=4201 uid=0 auid=0 ses=463 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346034080.272:3651): user pid=4201 uid=0 auid=0 ses=463 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=4201 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346034080.272:3652): user pid=4201 uid=0 auid=0 ses=463 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=4201 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346034080.272:3653): user pid=4201 uid=0 auid=0 ses=463 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4201 suid=0 rport=55205 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=MAC_CONFIG_CHANGE msg=audit(1346034208.067:3654): bool=virt_use_nfs val=0 old_val=1 auid=0 ses=459 >type=SYSCALL msg=audit(1346034208.067:3654): arch=c000003e syscall=1 success=yes exit=2 a0=4 a1=7fffa8d88d50 a2=2 a3=fffffff8 items=0 ppid=3880 pid=4290 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=459 comm="setsebool" exe="/usr/sbin/setsebool" subj=unconfined_u:unconfined_r:setsebool_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1346034239.592:3655): user pid=4299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=4299 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346034239.592:3656): user pid=4299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=4299 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346034239.594:3657): user pid=4298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=4299 suid=74 rport=55222 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346034239.594:3658): user pid=4298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=4299 suid=74 rport=55222 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346034242.998:3659): user pid=4298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1346034245.943:3660): user pid=4298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1346034245.946:3661): user pid=4298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346034245.947:3662): user pid=4298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4299 suid=74 rport=55222 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346034245.948:3663): user pid=4298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1346034245.948:3664): user pid=4298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1346034245.948:3665): pid=4298 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=464 >type=USER_ROLE_CHANGE msg=audit(1346034246.021:3666): user pid=4298 uid=0 auid=0 ses=464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346034246.024:3667): user pid=4298 uid=0 auid=0 ses=464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1346034246.025:3668): user pid=4298 uid=0 auid=0 ses=464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346034246.025:3669): user pid=4298 uid=0 auid=0 ses=464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346034246.026:3670): user pid=4302 uid=0 auid=0 ses=464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=4302 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346034246.026:3671): user pid=4302 uid=0 auid=0 ses=464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=4302 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRED_REFR msg=audit(1346034246.027:3672): user pid=4302 uid=0 auid=0 ses=464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=VIRT_MACHINE_ID msg=audit(1346034246.192:3673): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346034246.192:3674): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346034246.192:3675): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=none exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346034246.309:3676): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346034246.311:3677): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346034246.312:3678): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346034246.312:3679): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346034246.312:3680): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346034246.312:3681): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346034246.312:3682): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346034246.312:3683): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346034246.312:3684): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346034246.313:3685): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1346034246.313:3686): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346034246.313:3687): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346034246.339:3688): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="macvtap0" rdev=? exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346034246.339:3689): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1346034246.396:3690): avc: denied { read write } for pid=4322 comm="qemu-kvm" path="/dev/tap27" dev=devtmpfs ino=105992 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1346034246.396:3690): arch=c000003e syscall=59 success=yes exit=0 a0=7f2c9c003690 a1=7f2c9c032c40 a2=7f2c9c002f70 a3=18 items=0 ppid=1 pid=4322 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=459 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1346034246.494:3691): avc: denied { getattr } for pid=4322 comm="qemu-kvm" name="/" dev=0:1b ino=101 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:nfs_t:s0 tclass=filesystem >type=SYSCALL msg=audit(1346034246.494:3691): arch=c000003e syscall=138 success=no exit=-13 a0=9 a1=7fff77741f90 a2=3 a3=48 items=0 ppid=1 pid=4322 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=459 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1346034246.737:3692): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-disk="?" new-disk="/mnt/testkf8.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346034246.737:3693): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346034246.737:3694): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346034246.737:3695): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346034246.737:3696): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=migrated vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=4322 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346034251.911:3697): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=failed vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1346034252.054:3698): user pid=4298 uid=0 auid=0 ses=464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1346034252.054:3699): user pid=4298 uid=0 auid=0 ses=464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1346034252.055:3700): user pid=4298 uid=0 auid=0 ses=464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1346034252.055:3701): user pid=4298 uid=0 auid=0 ses=464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346034252.055:3702): user pid=4298 uid=0 auid=0 ses=464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=4298 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346034252.055:3703): user pid=4298 uid=0 auid=0 ses=464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=4298 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346034252.055:3704): user pid=4298 uid=0 auid=0 ses=464 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4298 suid=0 rport=55222 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346034387.086:3705): user pid=4375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=4375 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346034387.087:3706): user pid=4375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=4375 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346034387.087:3707): user pid=4374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=4375 suid=74 rport=55241 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346034387.087:3708): user pid=4374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=4375 suid=74 rport=55241 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346034390.534:3709): user pid=4374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1346034392.914:3710): user pid=4374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1346034392.917:3711): user pid=4374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346034392.917:3712): user pid=4374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4375 suid=74 rport=55241 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346034392.918:3713): user pid=4374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1346034392.918:3714): user pid=4374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1346034392.918:3715): pid=4374 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=465 >type=USER_ROLE_CHANGE msg=audit(1346034392.986:3716): user pid=4374 uid=0 auid=0 ses=465 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346034392.988:3717): user pid=4374 uid=0 auid=0 ses=465 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1346034392.990:3718): user pid=4374 uid=0 auid=0 ses=465 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346034392.990:3719): user pid=4374 uid=0 auid=0 ses=465 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346034392.991:3720): user pid=4378 uid=0 auid=0 ses=465 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=4378 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346034392.991:3721): user pid=4378 uid=0 auid=0 ses=465 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=4378 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRED_REFR msg=audit(1346034392.992:3722): user pid=4378 uid=0 auid=0 ses=465 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=VIRT_MACHINE_ID msg=audit(1346034393.160:3723): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346034393.160:3724): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346034393.160:3725): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=none exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346034393.278:3726): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346034393.281:3727): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346034393.281:3728): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346034393.281:3729): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346034393.281:3730): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346034393.281:3731): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346034393.281:3732): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346034393.281:3733): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346034393.281:3734): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346034393.281:3735): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1346034393.282:3736): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346034393.282:3737): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346034393.312:3738): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="macvtap0" rdev=? exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346034393.312:3739): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1346034393.374:3740): avc: denied { read write } for pid=4398 comm="qemu-kvm" path="/dev/tap28" dev=devtmpfs ino=106404 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1346034393.374:3740): arch=c000003e syscall=59 success=yes exit=0 a0=7f2c880055b0 a1=7f2c88005cd0 a2=7f2c88004e90 a3=18 items=0 ppid=1 pid=4398 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=459 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1346034393.479:3741): avc: denied { getattr } for pid=4398 comm="qemu-kvm" name="/" dev=0:1b ino=101 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:nfs_t:s0 tclass=filesystem >type=SYSCALL msg=audit(1346034393.479:3741): arch=c000003e syscall=138 success=no exit=-13 a0=9 a1=7fff13ba0610 a2=3 a3=48 items=0 ppid=1 pid=4398 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=459 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1346034393.724:3742): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-disk="?" new-disk="/mnt/testkf8.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346034393.724:3743): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346034393.724:3744): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346034393.724:3745): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346034393.724:3746): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=migrated vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=4398 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1346034397.654:3747): avc: denied { getattr } for pid=4398 comm="qemu-kvm" name="/" dev=0:1b ino=101 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:nfs_t:s0 tclass=filesystem >type=SYSCALL msg=audit(1346034397.654:3747): arch=c000003e syscall=138 success=no exit=-13 a0=9 a1=7fff13ba04d0 a2=3 a3=48 items=0 ppid=1 pid=4398 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=459 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1346034398.307:3748): user pid=4374 uid=0 auid=0 ses=465 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1346034398.307:3749): user pid=4374 uid=0 auid=0 ses=465 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1346034398.308:3750): user pid=4374 uid=0 auid=0 ses=465 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1346034398.308:3751): user pid=4374 uid=0 auid=0 ses=465 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346034398.308:3752): user pid=4374 uid=0 auid=0 ses=465 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=4374 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346034398.308:3753): user pid=4374 uid=0 auid=0 ses=465 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=4374 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346034398.308:3754): user pid=4374 uid=0 auid=0 ses=465 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4374 suid=0 rport=55241 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_ACCT msg=audit(1346034601.544:3755): user pid=4519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346034601.544:3756): user pid=4519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346034601.551:3757): pid=4519 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=466 >type=USER_START msg=audit(1346034601.564:3758): user pid=4519 uid=0 auid=0 ses=466 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346034601.612:3759): user pid=4519 uid=0 auid=0 ses=466 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346034601.613:3760): user pid=4519 uid=0 auid=0 ses=466 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRYPTO_KEY_USER msg=audit(1346034652.006:3761): user pid=4530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=4530 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346034652.006:3762): user pid=4530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=4530 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346034652.007:3763): user pid=4529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=4530 suid=74 rport=55274 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346034652.008:3764): user pid=4529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=4530 suid=74 rport=55274 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346034659.876:3765): user pid=4529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1346034663.055:3766): user pid=4529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1346034663.058:3767): user pid=4529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346034663.058:3768): user pid=4529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4530 suid=74 rport=55274 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346034663.061:3769): user pid=4529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1346034663.061:3770): user pid=4529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1346034663.061:3771): pid=4529 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=467 >type=USER_ROLE_CHANGE msg=audit(1346034663.131:3772): user pid=4529 uid=0 auid=0 ses=467 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346034663.135:3773): user pid=4529 uid=0 auid=0 ses=467 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1346034663.136:3774): user pid=4529 uid=0 auid=0 ses=467 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346034663.136:3775): user pid=4529 uid=0 auid=0 ses=467 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346034663.137:3776): user pid=4533 uid=0 auid=0 ses=467 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=4533 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346034663.138:3777): user pid=4533 uid=0 auid=0 ses=467 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=4533 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRED_REFR msg=audit(1346034663.138:3778): user pid=4533 uid=0 auid=0 ses=467 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346034666.938:3779): user pid=4557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=4557 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346034666.938:3780): user pid=4557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=4557 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346034666.938:3781): user pid=4556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=4557 suid=74 rport=55275 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346034666.938:3782): user pid=4556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=4557 suid=74 rport=55275 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346034670.259:3783): user pid=4556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1346034672.763:3784): user pid=4556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1346034672.766:3785): user pid=4556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346034672.767:3786): user pid=4556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4557 suid=74 rport=55275 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346034672.768:3787): user pid=4556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1346034672.768:3788): user pid=4556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1346034672.768:3789): pid=4556 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=468 >type=USER_ROLE_CHANGE msg=audit(1346034672.833:3790): user pid=4556 uid=0 auid=0 ses=468 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346034672.836:3791): user pid=4556 uid=0 auid=0 ses=468 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1346034672.838:3792): user pid=4556 uid=0 auid=0 ses=468 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346034672.838:3793): user pid=4556 uid=0 auid=0 ses=468 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346034672.839:3794): user pid=4560 uid=0 auid=0 ses=468 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=4560 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346034672.839:3795): user pid=4560 uid=0 auid=0 ses=468 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=4560 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRED_REFR msg=audit(1346034672.840:3796): user pid=4560 uid=0 auid=0 ses=468 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1346035201.637:3797): user pid=4629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346035201.637:3798): user pid=4629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346035201.644:3799): pid=4629 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=469 >type=USER_START msg=audit(1346035201.653:3800): user pid=4629 uid=0 auid=0 ses=469 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346035201.724:3801): user pid=4629 uid=0 auid=0 ses=469 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346035201.724:3802): user pid=4629 uid=0 auid=0 ses=469 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346035801.732:3803): user pid=4692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346035801.732:3804): user pid=4692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346035801.732:3805): pid=4692 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=470 >type=USER_START msg=audit(1346035801.741:3806): user pid=4692 uid=0 auid=0 ses=470 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346035801.788:3807): user pid=4692 uid=0 auid=0 ses=470 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346035801.788:3808): user pid=4692 uid=0 auid=0 ses=470 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346036401.794:3809): user pid=4755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346036401.795:3810): user pid=4755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346036401.795:3811): pid=4755 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=471 >type=USER_START msg=audit(1346036401.804:3812): user pid=4755 uid=0 auid=0 ses=471 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346036401.841:3813): user pid=4755 uid=0 auid=0 ses=471 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346036401.841:3814): user pid=4755 uid=0 auid=0 ses=471 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346036461.845:3815): user pid=4764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346036461.845:3816): user pid=4764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346036461.846:3817): pid=4764 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=472 >type=USER_START msg=audit(1346036461.851:3818): user pid=4764 uid=0 auid=0 ses=472 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346036461.869:3819): user pid=4764 uid=0 auid=0 ses=472 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346036461.869:3820): user pid=4764 uid=0 auid=0 ses=472 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346036522.172:3821): user pid=4556 uid=0 auid=0 ses=468 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1346036522.172:3822): user pid=4556 uid=0 auid=0 ses=468 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1346036522.172:3823): user pid=4556 uid=0 auid=0 ses=468 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1346036522.172:3824): user pid=4556 uid=0 auid=0 ses=468 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346036522.172:3825): user pid=4556 uid=0 auid=0 ses=468 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=4556 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346036522.173:3826): user pid=4556 uid=0 auid=0 ses=468 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=4556 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346036522.173:3827): user pid=4556 uid=0 auid=0 ses=468 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4556 suid=0 rport=55275 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346036522.486:3828): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1346037001.879:3829): user pid=4849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346037001.879:3830): user pid=4849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346037001.885:3831): pid=4849 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=473 >type=USER_START msg=audit(1346037001.893:3832): user pid=4849 uid=0 auid=0 ses=473 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346037001.952:3833): user pid=4849 uid=0 auid=0 ses=473 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346037001.952:3834): user pid=4849 uid=0 auid=0 ses=473 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346037601.959:3835): user pid=4913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346037601.959:3836): user pid=4913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346037601.960:3837): pid=4913 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=474 >type=USER_START msg=audit(1346037601.965:3838): user pid=4913 uid=0 auid=0 ses=474 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346037602.041:3839): user pid=4913 uid=0 auid=0 ses=474 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346037602.041:3840): user pid=4913 uid=0 auid=0 ses=474 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346038201.048:3841): user pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346038201.048:3842): user pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346038201.048:3843): pid=4976 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=475 >type=USER_START msg=audit(1346038201.057:3844): user pid=4976 uid=0 auid=0 ses=475 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346038201.087:3845): user pid=4976 uid=0 auid=0 ses=475 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346038201.087:3846): user pid=4976 uid=0 auid=0 ses=475 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346038801.096:3847): user pid=5060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346038801.096:3848): user pid=5060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346038801.098:3849): pid=5060 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=476 >type=USER_START msg=audit(1346038801.104:3850): user pid=5060 uid=0 auid=0 ses=476 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346038801.161:3851): user pid=5060 uid=0 auid=0 ses=476 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346038801.161:3852): user pid=5060 uid=0 auid=0 ses=476 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346038895.908:3853): user pid=4529 uid=0 auid=0 ses=467 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1346038895.908:3854): user pid=3876 uid=0 auid=0 ses=459 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1346038895.908:3855): user pid=4529 uid=0 auid=0 ses=467 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1346038895.908:3856): user pid=3876 uid=0 auid=0 ses=459 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1346038895.909:3857): user pid=4529 uid=0 auid=0 ses=467 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1346038895.909:3858): user pid=4529 uid=0 auid=0 ses=467 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346038895.909:3859): user pid=4529 uid=0 auid=0 ses=467 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=4529 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346038895.909:3860): user pid=4529 uid=0 auid=0 ses=467 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=4529 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346038895.909:3861): user pid=4529 uid=0 auid=0 ses=467 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4529 suid=0 rport=55274 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_END msg=audit(1346038895.910:3862): user pid=3876 uid=0 auid=0 ses=459 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1346038895.910:3863): user pid=3876 uid=0 auid=0 ses=459 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1346038895.911:3864): user pid=3876 uid=0 auid=0 ses=459 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=3876 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346038895.911:3865): user pid=3876 uid=0 auid=0 ses=459 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=3876 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346038895.911:3866): user pid=3876 uid=0 auid=0 ses=459 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3876 suid=0 rport=55110 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_ACCT msg=audit(1346039401.170:3867): user pid=5123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346039401.170:3868): user pid=5123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346039401.170:3869): pid=5123 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=477 >type=USER_START msg=audit(1346039401.173:3870): user pid=5123 uid=0 auid=0 ses=477 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346039401.205:3871): user pid=5123 uid=0 auid=0 ses=477 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346039401.205:3872): user pid=5123 uid=0 auid=0 ses=477 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346040001.211:3873): user pid=5186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346040001.211:3874): user pid=5186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346040001.212:3875): pid=5186 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=478 >type=USER_START msg=audit(1346040001.217:3876): user pid=5186 uid=0 auid=0 ses=478 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346040001.283:3877): user pid=5186 uid=0 auid=0 ses=478 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346040001.283:3878): user pid=5186 uid=0 auid=0 ses=478 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346040061.287:3879): user pid=5195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346040061.287:3880): user pid=5195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346040061.288:3881): pid=5195 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=479 >type=USER_START msg=audit(1346040061.293:3882): user pid=5195 uid=0 auid=0 ses=479 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346040061.313:3883): user pid=5195 uid=0 auid=0 ses=479 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346040061.314:3884): user pid=5195 uid=0 auid=0 ses=479 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346040601.323:3885): user pid=5262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346040601.323:3886): user pid=5262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346040601.323:3887): pid=5262 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=480 >type=USER_START msg=audit(1346040601.332:3888): user pid=5262 uid=0 auid=0 ses=480 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346040601.389:3889): user pid=5262 uid=0 auid=0 ses=480 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346040601.389:3890): user pid=5262 uid=0 auid=0 ses=480 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346041201.395:3891): user pid=5325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346041201.395:3892): user pid=5325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346041201.396:3893): pid=5325 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=481 >type=USER_START msg=audit(1346041201.403:3894): user pid=5325 uid=0 auid=0 ses=481 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346041201.418:3895): user pid=5325 uid=0 auid=0 ses=481 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346041201.418:3896): user pid=5325 uid=0 auid=0 ses=481 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346041801.424:3897): user pid=5388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346041801.425:3898): user pid=5388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346041801.425:3899): pid=5388 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=482 >type=USER_START msg=audit(1346041801.432:3900): user pid=5388 uid=0 auid=0 ses=482 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346041801.492:3901): user pid=5388 uid=0 auid=0 ses=482 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346041801.492:3902): user pid=5388 uid=0 auid=0 ses=482 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346042401.498:3903): user pid=5451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346042401.498:3904): user pid=5451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346042401.499:3905): pid=5451 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=483 >type=USER_START msg=audit(1346042401.506:3906): user pid=5451 uid=0 auid=0 ses=483 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346042401.566:3907): user pid=5451 uid=0 auid=0 ses=483 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346042401.566:3908): user pid=5451 uid=0 auid=0 ses=483 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346043001.572:3909): user pid=5514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346043001.572:3910): user pid=5514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346043001.572:3911): pid=5514 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=484 >type=USER_START msg=audit(1346043001.580:3912): user pid=5514 uid=0 auid=0 ses=484 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346043001.598:3913): user pid=5514 uid=0 auid=0 ses=484 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346043001.598:3914): user pid=5514 uid=0 auid=0 ses=484 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346043601.604:3915): user pid=5577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346043601.605:3916): user pid=5577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346043601.605:3917): pid=5577 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=485 >type=USER_START msg=audit(1346043601.612:3918): user pid=5577 uid=0 auid=0 ses=485 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346043601.685:3919): user pid=5577 uid=0 auid=0 ses=485 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346043601.685:3920): user pid=5577 uid=0 auid=0 ses=485 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346043661.690:3921): user pid=5586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346043661.690:3922): user pid=5586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346043661.690:3923): pid=5586 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=486 >type=USER_START msg=audit(1346043661.698:3924): user pid=5586 uid=0 auid=0 ses=486 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346043661.710:3925): user pid=5586 uid=0 auid=0 ses=486 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346043661.710:3926): user pid=5586 uid=0 auid=0 ses=486 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346044201.716:3927): user pid=5652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346044201.716:3928): user pid=5652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346044201.716:3929): pid=5652 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=487 >type=USER_START msg=audit(1346044201.722:3930): user pid=5652 uid=0 auid=0 ses=487 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346044201.748:3931): user pid=5652 uid=0 auid=0 ses=487 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346044201.748:3932): user pid=5652 uid=0 auid=0 ses=487 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1346044801.755:3933): user pid=5715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346044801.755:3934): user pid=5715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346044801.756:3935): pid=5715 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=488 >type=USER_START msg=audit(1346044801.761:3936): user pid=5715 uid=0 auid=0 ses=488 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346044801.822:3937): user pid=5715 uid=0 auid=0 ses=488 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346044801.822:3938): user pid=5715 uid=0 auid=0 ses=488 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRYPTO_KEY_USER msg=audit(1346044972.309:3939): user pid=5737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=5737 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346044972.309:3940): user pid=5737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=5737 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346044972.309:3941): user pid=5736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=5737 suid=74 rport=54522 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346044972.309:3942): user pid=5736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=5737 suid=74 rport=54522 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346044979.311:3943): user pid=5736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1346044981.625:3944): user pid=5736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1346044981.628:3945): user pid=5736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346044981.628:3946): user pid=5736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5737 suid=74 rport=54522 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346044981.629:3947): user pid=5736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1346044981.629:3948): user pid=5736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1346044981.629:3949): pid=5736 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=489 >type=USER_ROLE_CHANGE msg=audit(1346044981.702:3950): user pid=5736 uid=0 auid=0 ses=489 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346044981.705:3951): user pid=5736 uid=0 auid=0 ses=489 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1346044981.707:3952): user pid=5736 uid=0 auid=0 ses=489 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346044981.707:3953): user pid=5736 uid=0 auid=0 ses=489 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346044981.708:3954): user pid=5740 uid=0 auid=0 ses=489 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=5740 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346044981.708:3955): user pid=5740 uid=0 auid=0 ses=489 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=5740 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRED_REFR msg=audit(1346044981.708:3956): user pid=5740 uid=0 auid=0 ses=489 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=VIRT_MACHINE_ID msg=audit(1346044981.916:3957): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346044981.916:3958): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=none exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346044982.030:3959): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346044982.037:3960): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346044982.037:3961): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346044982.037:3962): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346044982.038:3963): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346044982.038:3964): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346044982.038:3965): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346044982.038:3966): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346044982.038:3967): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346044982.038:3968): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1346044982.039:3969): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346044982.039:3970): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346044982.060:3971): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="macvtap0" rdev=? exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346044982.061:3972): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1346044982.110:3973): avc: denied { read write } for pid=5760 comm="qemu-kvm" path="/dev/tap29" dev=devtmpfs ino=110248 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1346044982.110:3973): arch=c000003e syscall=59 success=yes exit=0 a0=7f2ca40c4f70 a1=7f2ca40c54d0 a2=7f2ca4005e40 a3=18 items=0 ppid=1 pid=5760 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=459 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1346044982.208:3974): avc: denied { getattr } for pid=5760 comm="qemu-kvm" name="/" dev=0:1b ino=101 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:nfs_t:s0 tclass=filesystem >type=SYSCALL msg=audit(1346044982.208:3974): arch=c000003e syscall=138 success=no exit=-13 a0=9 a1=7ffffdda9b60 a2=3 a3=48 items=0 ppid=1 pid=5760 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=459 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1346044982.464:3975): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-disk="?" new-disk="/mnt/testkf8.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346044982.464:3976): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346044982.464:3977): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346044982.464:3978): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346044982.464:3979): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=migrated vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=5760 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346044983.182:3980): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=failed vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1346044983.187:3981): user pid=5736 uid=0 auid=0 ses=489 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1346044983.187:3982): user pid=5736 uid=0 auid=0 ses=489 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1346044983.188:3983): user pid=5736 uid=0 auid=0 ses=489 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1346044983.188:3984): user pid=5736 uid=0 auid=0 ses=489 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346044983.188:3985): user pid=5736 uid=0 auid=0 ses=489 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=5736 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346044983.188:3986): user pid=5736 uid=0 auid=0 ses=489 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=5736 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346044983.188:3987): user pid=5736 uid=0 auid=0 ses=489 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5736 suid=0 rport=54522 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346044999.469:3988): user pid=5801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=5801 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346044999.469:3989): user pid=5801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=5801 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346044999.470:3990): user pid=5800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=5801 suid=74 rport=54528 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346044999.470:3991): user pid=5800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=5801 suid=74 rport=54528 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346045005.282:3992): user pid=5800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1346045009.060:3993): user pid=5800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1346045009.063:3994): user pid=5800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346045009.063:3995): user pid=5800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5801 suid=74 rport=54528 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346045009.064:3996): user pid=5800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1346045009.065:3997): user pid=5800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1346045009.065:3998): pid=5800 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=490 >type=USER_ROLE_CHANGE msg=audit(1346045009.131:3999): user pid=5800 uid=0 auid=0 ses=490 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346045009.134:4000): user pid=5800 uid=0 auid=0 ses=490 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1346045009.136:4001): user pid=5800 uid=0 auid=0 ses=490 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346045009.136:4002): user pid=5800 uid=0 auid=0 ses=490 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346045009.137:4003): user pid=5804 uid=0 auid=0 ses=490 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=5804 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346045009.137:4004): user pid=5804 uid=0 auid=0 ses=490 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=5804 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRED_REFR msg=audit(1346045009.139:4005): user pid=5804 uid=0 auid=0 ses=490 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346045021.292:4006): user pid=5825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=5825 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346045021.293:4007): user pid=5825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=5825 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346045021.293:4008): user pid=5824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=5825 suid=74 rport=54536 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346045021.294:4009): user pid=5824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=5825 suid=74 rport=54536 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346045026.232:4010): user pid=5824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1346045038.036:4011): user pid=5824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1346045038.039:4012): user pid=5824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346045038.040:4013): user pid=5824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5825 suid=74 rport=54536 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346045038.040:4014): user pid=5824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1346045038.040:4015): user pid=5824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1346045038.041:4016): pid=5824 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=491 >type=USER_ROLE_CHANGE msg=audit(1346045038.107:4017): user pid=5824 uid=0 auid=0 ses=491 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346045038.110:4018): user pid=5824 uid=0 auid=0 ses=491 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1346045038.142:4019): user pid=5855 uid=0 auid=0 ses=491 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1346045038.143:4020): user pid=5855 uid=0 auid=0 ses=491 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1346045038.143:4021): user pid=5855 uid=0 auid=0 ses=491 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=5855 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1346045038.143:4022): user pid=5855 uid=0 auid=0 ses=491 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=5855 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1346045038.143:4023): user pid=5855 uid=0 auid=0 ses=491 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346045113.268:4024): user pid=5885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=5885 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346045113.268:4025): user pid=5885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=5885 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346045113.269:4026): user pid=5884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=5885 suid=74 rport=54550 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346045113.269:4027): user pid=5884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=5885 suid=74 rport=54550 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346045120.648:4028): user pid=5884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1346045125.430:4029): user pid=5884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1346045125.433:4030): user pid=5884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346045125.433:4031): user pid=5884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5885 suid=74 rport=54550 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346045125.434:4032): user pid=5884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1346045125.434:4033): user pid=5884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1346045125.434:4034): pid=5884 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=492 >type=USER_ROLE_CHANGE msg=audit(1346045125.501:4035): user pid=5884 uid=0 auid=0 ses=492 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346045125.504:4036): user pid=5884 uid=0 auid=0 ses=492 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1346045125.506:4037): user pid=5884 uid=0 auid=0 ses=492 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346045125.506:4038): user pid=5884 uid=0 auid=0 ses=492 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346045125.506:4039): user pid=5888 uid=0 auid=0 ses=492 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=5888 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346045125.507:4040): user pid=5888 uid=0 auid=0 ses=492 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=5888 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRED_REFR msg=audit(1346045125.507:4041): user pid=5888 uid=0 auid=0 ses=492 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=VIRT_MACHINE_ID msg=audit(1346045125.674:4042): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346045125.674:4043): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=none exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346045125.791:4044): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346045125.794:4045): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346045125.794:4046): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346045125.794:4047): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346045125.794:4048): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346045125.794:4049): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346045125.794:4050): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346045125.794:4051): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346045125.795:4052): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346045125.795:4053): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1346045125.795:4054): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346045125.795:4055): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346045125.822:4056): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="macvtap0" rdev=? exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346045125.822:4057): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1346045125.984:4058): avc: denied { getattr } for pid=5908 comm="qemu-kvm" name="/" dev=0:1b ino=101 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:nfs_t:s0 tclass=filesystem >type=SYSCALL msg=audit(1346045125.984:4058): arch=c000003e syscall=138 success=no exit=-13 a0=9 a1=7fff9de56400 a2=3 a3=48 items=0 ppid=1 pid=5908 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=459 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1346045126.269:4059): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-disk="?" new-disk="/mnt/testkf8.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346045126.269:4060): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346045126.269:4061): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346045126.269:4062): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346045126.269:4063): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=migrated vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=5908 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346045126.959:4064): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=failed vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1346045126.965:4065): user pid=5884 uid=0 auid=0 ses=492 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1346045126.965:4066): user pid=5884 uid=0 auid=0 ses=492 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1346045126.966:4067): user pid=5884 uid=0 auid=0 ses=492 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1346045126.966:4068): user pid=5884 uid=0 auid=0 ses=492 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346045126.966:4069): user pid=5884 uid=0 auid=0 ses=492 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=5884 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346045126.966:4070): user pid=5884 uid=0 auid=0 ses=492 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=5884 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346045126.966:4071): user pid=5884 uid=0 auid=0 ses=492 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5884 suid=0 rport=54550 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_ACCT msg=audit(1346045401.855:4072): user pid=5979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346045401.855:4073): user pid=5979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346045401.862:4074): pid=5979 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=493 >type=USER_START msg=audit(1346045401.868:4075): user pid=5979 uid=0 auid=0 ses=493 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346045401.952:4076): user pid=5979 uid=0 auid=0 ses=493 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346045401.952:4077): user pid=5979 uid=0 auid=0 ses=493 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRYPTO_KEY_USER msg=audit(1346045415.173:4078): user pid=5983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=5983 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346045415.173:4079): user pid=5983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=5983 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346045415.174:4080): user pid=5982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=5983 suid=74 rport=54790 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346045415.174:4081): user pid=5982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=5983 suid=74 rport=54790 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346045421.133:4082): user pid=5982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1346045424.884:4083): user pid=5982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1346045424.886:4084): user pid=5982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346045424.887:4085): user pid=5982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5983 suid=74 rport=54790 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346045424.887:4086): user pid=5982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1346045424.888:4087): user pid=5982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1346045424.888:4088): pid=5982 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=494 >type=USER_ROLE_CHANGE msg=audit(1346045424.954:4089): user pid=5982 uid=0 auid=0 ses=494 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346045424.957:4090): user pid=5982 uid=0 auid=0 ses=494 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1346045424.958:4091): user pid=5982 uid=0 auid=0 ses=494 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346045424.958:4092): user pid=5982 uid=0 auid=0 ses=494 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346045424.959:4093): user pid=5986 uid=0 auid=0 ses=494 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=5986 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346045424.960:4094): user pid=5986 uid=0 auid=0 ses=494 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=5986 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRED_REFR msg=audit(1346045424.960:4095): user pid=5986 uid=0 auid=0 ses=494 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=VIRT_MACHINE_ID msg=audit(1346045425.148:4096): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346045425.148:4097): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346045425.148:4098): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=none exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346045425.272:4099): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346045425.276:4100): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346045425.276:4101): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346045425.276:4102): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346045425.276:4103): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346045425.276:4104): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346045425.276:4105): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346045425.276:4106): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346045425.277:4107): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346045425.277:4108): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1346045425.277:4109): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346045425.277:4110): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346045425.304:4111): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="macvtap0" rdev=? exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346045425.304:4112): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1346045425.355:4113): avc: denied { read write } for pid=6006 comm="qemu-kvm" path="/dev/tap31" dev=devtmpfs ino=111480 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1346045425.355:4113): arch=c000003e syscall=59 success=yes exit=0 a0=7f2c88005360 a1=7f2c88005b70 a2=7f2c88004c40 a3=18 items=0 ppid=1 pid=6006 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=459 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1346045425.450:4114): avc: denied { getattr } for pid=6006 comm="qemu-kvm" name="/" dev=0:1b ino=101 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:nfs_t:s0 tclass=filesystem >type=SYSCALL msg=audit(1346045425.450:4114): arch=c000003e syscall=138 success=no exit=-13 a0=9 a1=7fffdbdeeb20 a2=3 a3=48 items=0 ppid=1 pid=6006 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=459 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1346045425.712:4115): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-disk="?" new-disk="/mnt/testkf8.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346045425.712:4116): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346045425.712:4117): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346045425.712:4118): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346045425.712:4119): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=migrated vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=6006 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346045430.969:4120): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=failed vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1346045431.113:4121): user pid=5982 uid=0 auid=0 ses=494 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1346045431.113:4122): user pid=5982 uid=0 auid=0 ses=494 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1346045431.113:4123): user pid=5982 uid=0 auid=0 ses=494 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1346045431.113:4124): user pid=5982 uid=0 auid=0 ses=494 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346045431.113:4125): user pid=5982 uid=0 auid=0 ses=494 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=5982 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346045431.114:4126): user pid=5982 uid=0 auid=0 ses=494 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=5982 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346045431.114:4127): user pid=5982 uid=0 auid=0 ses=494 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5982 suid=0 rport=54790 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=MAC_STATUS msg=audit(1346045477.088:4128): enforcing=0 old_enforcing=1 auid=0 ses=491 >type=SYSCALL msg=audit(1346045477.088:4128): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff3af0c7c0 a2=1 a3=fffffff8 items=0 ppid=5855 pid=6058 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=491 comm="setenforce" exe="/usr/sbin/setenforce" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1346045481.611:4129): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1346045481.611:4129): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=2445600 items=0 ppid=5855 pid=6059 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=491 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1346045491.461:4130): user pid=6061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=6061 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346045491.461:4131): user pid=6061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=6061 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346045491.463:4132): user pid=6060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=6061 suid=74 rport=54800 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346045491.463:4133): user pid=6060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=6061 suid=74 rport=54800 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346045498.098:4134): user pid=6060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1346045502.928:4135): user pid=6060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1346045502.931:4136): user pid=6060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346045502.932:4137): user pid=6060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6061 suid=74 rport=54800 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346045502.933:4138): user pid=6060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1346045502.933:4139): user pid=6060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1346045502.933:4140): pid=6060 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=495 >type=USER_ROLE_CHANGE msg=audit(1346045503.000:4141): user pid=6060 uid=0 auid=0 ses=495 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346045503.003:4142): user pid=6060 uid=0 auid=0 ses=495 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1346045503.004:4143): user pid=6060 uid=0 auid=0 ses=495 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346045503.004:4144): user pid=6060 uid=0 auid=0 ses=495 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346045503.004:4145): user pid=6070 uid=0 auid=0 ses=495 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=6070 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346045503.004:4146): user pid=6070 uid=0 auid=0 ses=495 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=6070 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRED_REFR msg=audit(1346045503.005:4147): user pid=6070 uid=0 auid=0 ses=495 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=VIRT_MACHINE_ID msg=audit(1346045503.212:4148): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346045503.212:4149): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346045503.212:4150): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=none exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346045503.328:4151): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346045503.330:4152): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346045503.330:4153): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346045503.331:4154): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346045503.331:4155): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346045503.331:4156): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346045503.331:4157): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346045503.331:4158): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346045503.331:4159): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346045503.331:4160): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1346045503.332:4161): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346045503.332:4162): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346045503.357:4163): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="macvtap0" rdev=? exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346045503.357:4164): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1346045503.408:4165): avc: denied { read write } for pid=6090 comm="qemu-kvm" path="/dev/tap32" dev=devtmpfs ino=111930 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1346045503.408:4165): arch=c000003e syscall=59 success=yes exit=0 a0=7f2ca43076f0 a1=7f2ca42c1790 a2=7f2ca42a6050 a3=18 items=0 ppid=1 pid=6090 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=459 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1346045503.503:4166): avc: denied { getattr } for pid=6090 comm="qemu-kvm" name="/" dev=0:1b ino=101 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:nfs_t:s0 tclass=filesystem >type=SYSCALL msg=audit(1346045503.503:4166): arch=c000003e syscall=138 success=yes exit=0 a0=9 a1=7fff1f06ae70 a2=3 a3=48 items=0 ppid=1 pid=6090 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=459 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1346045503.757:4167): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-disk="?" new-disk="/mnt/testkf8.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346045503.757:4168): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346045503.757:4169): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346045503.757:4170): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346045503.757:4171): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=migrated vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=6090 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1346045509.491:4172): user pid=6060 uid=0 auid=0 ses=495 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1346045509.491:4173): user pid=6060 uid=0 auid=0 ses=495 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1346045509.492:4174): user pid=6060 uid=0 auid=0 ses=495 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1346045509.492:4175): user pid=6060 uid=0 auid=0 ses=495 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346045509.492:4176): user pid=6060 uid=0 auid=0 ses=495 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=6060 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346045509.492:4177): user pid=6060 uid=0 auid=0 ses=495 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=6060 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346045509.492:4178): user pid=6060 uid=0 auid=0 ses=495 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6060 suid=0 rport=54800 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346045522.197:4179): user pid=6121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=6121 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346045522.197:4180): user pid=6121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=6121 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346045522.197:4181): user pid=6120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=6121 suid=74 rport=54808 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346045522.197:4182): user pid=6120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=6121 suid=74 rport=54808 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346045525.530:4183): user pid=6120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1346045527.425:4184): user pid=6120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1346045527.427:4185): user pid=6120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346045527.428:4186): user pid=6120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6121 suid=74 rport=54808 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346045527.429:4187): user pid=6120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1346045527.429:4188): user pid=6120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1346045527.429:4189): pid=6120 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=496 >type=USER_ROLE_CHANGE msg=audit(1346045527.496:4190): user pid=6120 uid=0 auid=0 ses=496 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346045527.499:4191): user pid=6120 uid=0 auid=0 ses=496 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1346045527.499:4192): user pid=6120 uid=0 auid=0 ses=496 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346045527.500:4193): user pid=6120 uid=0 auid=0 ses=496 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346045527.500:4194): user pid=6124 uid=0 auid=0 ses=496 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=6124 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346045527.501:4195): user pid=6124 uid=0 auid=0 ses=496 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=6124 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRED_REFR msg=audit(1346045527.501:4196): user pid=6124 uid=0 auid=0 ses=496 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346045702.705:4197): user pid=6154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=6154 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.4.198 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346045702.705:4198): user pid=6154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=6154 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.4.198 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346045702.706:4199): user pid=6153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=6154 suid=74 rport=55812 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.4.198 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346045702.706:4200): user pid=6153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=6154 suid=74 rport=55812 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.4.198 terminal=? res=success' >type=USER_AUTH msg=audit(1346045705.501:4201): user pid=6153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.4.198 addr=10.66.4.198 terminal=ssh res=success' >type=USER_ACCT msg=audit(1346045705.504:4202): user pid=6153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.4.198 addr=10.66.4.198 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346045705.504:4203): user pid=6153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6154 suid=74 rport=55812 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.4.198 terminal=? res=success' >type=USER_AUTH msg=audit(1346045705.505:4204): user pid=6153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.4.198 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1346045705.505:4205): user pid=6153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.4.198 addr=10.66.4.198 terminal=ssh res=success' >type=LOGIN msg=audit(1346045705.506:4206): pid=6153 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=497 >type=USER_ROLE_CHANGE msg=audit(1346045705.572:4207): user pid=6153 uid=0 auid=0 ses=497 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.4.198 addr=10.66.4.198 terminal=ssh res=success' >type=USER_START msg=audit(1346045705.575:4208): user pid=6153 uid=0 auid=0 ses=497 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.4.198 addr=10.66.4.198 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1346045705.580:4209): user pid=6157 uid=0 auid=0 ses=497 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.4.198 addr=10.66.4.198 terminal=/dev/pts/2 res=success' >type=USER_START msg=audit(1346045705.580:4210): user pid=6157 uid=0 auid=0 ses=497 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.4.198 addr=10.66.4.198 terminal=/dev/pts/2 res=success' >type=CRYPTO_KEY_USER msg=audit(1346045705.581:4211): user pid=6157 uid=0 auid=0 ses=497 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=6157 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.4.198 terminal=pts/2 res=success' >type=CRYPTO_KEY_USER msg=audit(1346045705.581:4212): user pid=6157 uid=0 auid=0 ses=497 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=6157 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.4.198 terminal=pts/2 res=success' >type=CRED_REFR msg=audit(1346045705.581:4213): user pid=6157 uid=0 auid=0 ses=497 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.4.198 addr=10.66.4.198 terminal=ssh res=success' >type=USER_END msg=audit(1346045716.923:4214): user pid=6153 uid=0 auid=0 ses=497 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/2 res=success' >type=USER_LOGOUT msg=audit(1346045716.923:4215): user pid=6153 uid=0 auid=0 ses=497 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/2 res=success' >type=USER_END msg=audit(1346045716.924:4216): user pid=6153 uid=0 auid=0 ses=497 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.4.198 addr=10.66.4.198 terminal=ssh res=success' >type=CRED_DISP msg=audit(1346045716.924:4217): user pid=6153 uid=0 auid=0 ses=497 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.4.198 addr=10.66.4.198 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346045716.924:4218): user pid=6153 uid=0 auid=0 ses=497 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=6153 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.4.198 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346045716.925:4219): user pid=6153 uid=0 auid=0 ses=497 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=6153 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.4.198 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346045716.925:4220): user pid=6153 uid=0 auid=0 ses=497 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6153 suid=0 rport=55812 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.4.198 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346045718.533:4221): user pid=6177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=6177 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.4.198 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346045718.534:4222): user pid=6177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=6177 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.4.198 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346045718.534:4223): user pid=6176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=6177 suid=74 rport=55815 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.4.198 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346045718.534:4224): user pid=6176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=6177 suid=74 rport=55815 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.4.198 terminal=? res=success' >type=USER_AUTH msg=audit(1346045719.669:4225): user pid=6176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.4.198 addr=10.66.4.198 terminal=ssh res=success' >type=USER_ACCT msg=audit(1346045719.672:4226): user pid=6176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.4.198 addr=10.66.4.198 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346045719.672:4227): user pid=6176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6177 suid=74 rport=55815 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.4.198 terminal=? res=success' >type=USER_AUTH msg=audit(1346045719.673:4228): user pid=6176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.4.198 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1346045719.674:4229): user pid=6176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.4.198 addr=10.66.4.198 terminal=ssh res=success' >type=LOGIN msg=audit(1346045719.674:4230): pid=6176 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=498 >type=USER_ROLE_CHANGE msg=audit(1346045719.737:4231): user pid=6176 uid=0 auid=0 ses=498 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.4.198 addr=10.66.4.198 terminal=ssh res=success' >type=USER_START msg=audit(1346045719.740:4232): user pid=6176 uid=0 auid=0 ses=498 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.4.198 addr=10.66.4.198 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1346045719.784:4233): user pid=6180 uid=0 auid=0 ses=498 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.4.198 addr=10.66.4.198 terminal=/dev/pts/2 res=success' >type=USER_START msg=audit(1346045719.784:4234): user pid=6180 uid=0 auid=0 ses=498 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.4.198 addr=10.66.4.198 terminal=/dev/pts/2 res=success' >type=CRYPTO_KEY_USER msg=audit(1346045719.785:4235): user pid=6180 uid=0 auid=0 ses=498 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=6180 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.4.198 terminal=pts/2 res=success' >type=CRYPTO_KEY_USER msg=audit(1346045719.785:4236): user pid=6180 uid=0 auid=0 ses=498 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=6180 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.4.198 terminal=pts/2 res=success' >type=CRED_REFR msg=audit(1346045719.785:4237): user pid=6180 uid=0 auid=0 ses=498 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.4.198 addr=10.66.4.198 terminal=ssh res=success' >type=USER_END msg=audit(1346045731.988:4238): user pid=6120 uid=0 auid=0 ses=496 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1346045731.988:4239): user pid=6120 uid=0 auid=0 ses=496 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1346045731.988:4240): user pid=6120 uid=0 auid=0 ses=496 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1346045731.988:4241): user pid=6120 uid=0 auid=0 ses=496 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346045731.988:4242): user pid=6120 uid=0 auid=0 ses=496 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=6120 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346045731.988:4243): user pid=6120 uid=0 auid=0 ses=496 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=6120 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346045731.988:4244): user pid=6120 uid=0 auid=0 ses=496 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6120 suid=0 rport=54808 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346045826.879:4245): user pid=6335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=6335 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.4.198 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346045826.879:4246): user pid=6335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=6335 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.4.198 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346045826.880:4247): user pid=6334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=6335 suid=74 rport=55826 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.4.198 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346045826.880:4248): user pid=6334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=6335 suid=74 rport=55826 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.4.198 terminal=? res=success' >type=USER_AUTH msg=audit(1346045828.841:4249): user pid=6334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.4.198 addr=10.66.4.198 terminal=ssh res=success' >type=USER_ACCT msg=audit(1346045828.844:4250): user pid=6334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.4.198 addr=10.66.4.198 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346045828.845:4251): user pid=6334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6335 suid=74 rport=55826 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.4.198 terminal=? res=success' >type=USER_AUTH msg=audit(1346045828.845:4252): user pid=6334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.4.198 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1346045828.846:4253): user pid=6334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.4.198 addr=10.66.4.198 terminal=ssh res=success' >type=LOGIN msg=audit(1346045828.846:4254): pid=6334 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=499 >type=USER_ROLE_CHANGE msg=audit(1346045828.916:4255): user pid=6334 uid=0 auid=0 ses=499 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.4.198 addr=10.66.4.198 terminal=ssh res=success' >type=USER_START msg=audit(1346045828.920:4256): user pid=6334 uid=0 auid=0 ses=499 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.4.198 addr=10.66.4.198 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1346045828.931:4257): user pid=6340 uid=0 auid=0 ses=499 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.4.198 addr=10.66.4.198 terminal=/dev/pts/3 res=success' >type=USER_START msg=audit(1346045828.931:4258): user pid=6340 uid=0 auid=0 ses=499 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.4.198 addr=10.66.4.198 terminal=/dev/pts/3 res=success' >type=CRYPTO_KEY_USER msg=audit(1346045828.931:4259): user pid=6340 uid=0 auid=0 ses=499 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=6340 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.4.198 terminal=pts/3 res=success' >type=CRYPTO_KEY_USER msg=audit(1346045828.932:4260): user pid=6340 uid=0 auid=0 ses=499 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=6340 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.4.198 terminal=pts/3 res=success' >type=CRED_REFR msg=audit(1346045828.932:4261): user pid=6340 uid=0 auid=0 ses=499 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.4.198 addr=10.66.4.198 terminal=ssh res=success' >type=USER_ACCT msg=audit(1346046001.998:4262): user pid=6553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346046001.998:4263): user pid=6553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346046002.005:4264): pid=6553 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=500 >type=USER_START msg=audit(1346046002.010:4265): user pid=6553 uid=0 auid=0 ses=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346046002.046:4266): user pid=6553 uid=0 auid=0 ses=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346046002.046:4267): user pid=6553 uid=0 auid=0 ses=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=MAC_STATUS msg=audit(1346046187.568:4268): enforcing=1 old_enforcing=0 auid=0 ses=499 >type=SYSCALL msg=audit(1346046187.568:4268): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffad356c80 a2=1 a3=fffffff8 items=0 ppid=6340 pid=6770 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts3 ses=499 comm="setenforce" exe="/usr/sbin/setenforce" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=MAC_CONFIG_CHANGE msg=audit(1346046275.733:4269): bool=virt_use_nfs val=1 old_val=0 auid=0 ses=499 >type=SYSCALL msg=audit(1346046275.733:4269): arch=c000003e syscall=1 success=yes exit=2 a0=3 a1=7fff98811ef0 a2=2 a3=fffffff8 items=0 ppid=6340 pid=6867 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts3 ses=499 comm="setsebool" exe="/usr/sbin/setsebool" subj=unconfined_u:unconfined_r:setsebool_t:s0-s0:c0.c1023 key=(null) >type=VIRT_CONTROL msg=audit(1346046585.013:4270): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1346046601.082:4271): user pid=7202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346046601.082:4272): user pid=7202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346046601.084:4273): pid=7202 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=501 >type=USER_START msg=audit(1346046601.090:4274): user pid=7202 uid=0 auid=0 ses=501 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346046601.165:4275): user pid=7202 uid=0 auid=0 ses=501 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346046601.165:4276): user pid=7202 uid=0 auid=0 ses=501 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRYPTO_KEY_USER msg=audit(1346046727.844:4277): user pid=7223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=7223 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346046727.844:4278): user pid=7223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=7223 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346046727.846:4279): user pid=7222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=7223 suid=74 rport=54997 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346046727.846:4280): user pid=7222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=7223 suid=74 rport=54997 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346046731.301:4281): user pid=7222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1346046737.602:4282): user pid=7222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1346046737.605:4283): user pid=7222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346046737.605:4284): user pid=7222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7223 suid=74 rport=54997 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346046737.606:4285): user pid=7222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1346046737.606:4286): user pid=7222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1346046737.606:4287): pid=7222 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=502 >type=USER_ROLE_CHANGE msg=audit(1346046737.679:4288): user pid=7222 uid=0 auid=0 ses=502 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346046737.683:4289): user pid=7222 uid=0 auid=0 ses=502 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1346046737.685:4290): user pid=7222 uid=0 auid=0 ses=502 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346046737.685:4291): user pid=7222 uid=0 auid=0 ses=502 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346046737.686:4292): user pid=7226 uid=0 auid=0 ses=502 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=7226 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346046737.686:4293): user pid=7226 uid=0 auid=0 ses=502 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=7226 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRED_REFR msg=audit(1346046737.687:4294): user pid=7226 uid=0 auid=0 ses=502 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=VIRT_MACHINE_ID msg=audit(1346046737.864:4295): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346046737.865:4296): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346046737.865:4297): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=none exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346046737.984:4298): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346046737.987:4299): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346046737.988:4300): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346046737.988:4301): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346046737.988:4302): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346046737.988:4303): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346046737.988:4304): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346046737.988:4305): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346046737.988:4306): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346046737.989:4307): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1346046737.989:4308): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346046737.989:4309): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346046738.021:4310): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="macvtap0" rdev=? exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346046738.021:4311): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1346046738.090:4312): avc: denied { read write } for pid=7246 comm="qemu-kvm" path="/dev/tap33" dev=devtmpfs ino=113668 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1346046738.090:4312): arch=c000003e syscall=59 success=yes exit=0 a0=7f2c84005750 a1=7f2c84005e20 a2=7f2c84004da0 a3=18 items=0 ppid=1 pid=7246 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=459 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1346046738.189:4313): avc: denied { getattr } for pid=7246 comm="qemu-kvm" name="/" dev=0:1b ino=101 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:nfs_t:s0 tclass=filesystem >type=SYSCALL msg=audit(1346046738.189:4313): arch=c000003e syscall=138 success=no exit=-13 a0=9 a1=7fff35941cf0 a2=3 a3=48 items=0 ppid=1 pid=7246 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=459 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1346046738.433:4314): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-disk="?" new-disk="/mnt/testkf8.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346046738.433:4315): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346046738.433:4316): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346046738.433:4317): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346046738.433:4318): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=migrated vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=7246 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346046743.482:4319): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=failed vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1346046743.631:4320): user pid=7222 uid=0 auid=0 ses=502 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1346046743.631:4321): user pid=7222 uid=0 auid=0 ses=502 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1346046743.631:4322): user pid=7222 uid=0 auid=0 ses=502 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1346046743.631:4323): user pid=7222 uid=0 auid=0 ses=502 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346046743.631:4324): user pid=7222 uid=0 auid=0 ses=502 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=7222 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346046743.631:4325): user pid=7222 uid=0 auid=0 ses=502 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=7222 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346046743.631:4326): user pid=7222 uid=0 auid=0 ses=502 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7222 suid=0 rport=54997 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346047156.745:4327): user pid=7335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=7335 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346047156.745:4328): user pid=7335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=7335 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346047156.746:4329): user pid=7334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=7335 suid=74 rport=55069 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346047156.746:4330): user pid=7334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=7335 suid=74 rport=55069 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346047160.419:4331): user pid=7334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1346047166.033:4332): user pid=7334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1346047166.033:4333): user pid=7334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1346047169.153:4334): user pid=7334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1346047169.156:4335): user pid=7334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346047169.156:4336): user pid=7334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7335 suid=74 rport=55069 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346047169.157:4337): user pid=7334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1346047169.157:4338): user pid=7334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1346047169.157:4339): pid=7334 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=503 >type=USER_ROLE_CHANGE msg=audit(1346047169.229:4340): user pid=7334 uid=0 auid=0 ses=503 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346047169.232:4341): user pid=7334 uid=0 auid=0 ses=503 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1346047169.233:4342): user pid=7334 uid=0 auid=0 ses=503 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346047169.234:4343): user pid=7334 uid=0 auid=0 ses=503 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346047169.234:4344): user pid=7339 uid=0 auid=0 ses=503 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=7339 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346047169.235:4345): user pid=7339 uid=0 auid=0 ses=503 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=7339 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRED_REFR msg=audit(1346047169.235:4346): user pid=7339 uid=0 auid=0 ses=503 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=VIRT_MACHINE_ID msg=audit(1346047169.406:4347): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346047169.406:4348): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346047169.406:4349): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=none exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047169.527:4350): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047169.533:4351): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047169.533:4352): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047169.533:4353): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047169.534:4354): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047169.534:4355): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047169.534:4356): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047169.534:4357): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047169.534:4358): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047169.535:4359): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1346047169.535:4360): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047169.535:4361): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047169.556:4362): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="macvtap0" rdev=? exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047169.556:4363): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1346047169.610:4364): avc: denied { read write } for pid=7359 comm="qemu-kvm" path="/dev/tap34" dev=devtmpfs ino=114220 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1346047169.610:4364): arch=c000003e syscall=59 success=yes exit=0 a0=7f2c9c0058b0 a1=7f2c9c0060e0 a2=7f2c9c004f00 a3=18 items=0 ppid=1 pid=7359 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=459 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1346047169.708:4365): avc: denied { getattr } for pid=7359 comm="qemu-kvm" name="/" dev=0:1b ino=101 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:nfs_t:s0 tclass=filesystem >type=SYSCALL msg=audit(1346047169.708:4365): arch=c000003e syscall=138 success=no exit=-13 a0=9 a1=7fff85c6c320 a2=3 a3=48 items=0 ppid=1 pid=7359 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=459 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1346047169.976:4366): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-disk="?" new-disk="/mnt/testkf8.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047169.976:4367): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047169.976:4368): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047169.976:4369): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346047169.976:4370): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=migrated vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=7359 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346047175.001:4371): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=failed vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1346047175.151:4372): user pid=7334 uid=0 auid=0 ses=503 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1346047175.151:4373): user pid=7334 uid=0 auid=0 ses=503 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1346047175.151:4374): user pid=7334 uid=0 auid=0 ses=503 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1346047175.151:4375): user pid=7334 uid=0 auid=0 ses=503 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346047175.152:4376): user pid=7334 uid=0 auid=0 ses=503 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=7334 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346047175.152:4377): user pid=7334 uid=0 auid=0 ses=503 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=7334 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346047175.152:4378): user pid=7334 uid=0 auid=0 ses=503 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7334 suid=0 rport=55069 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_ACCT msg=audit(1346047201.194:4379): user pid=7405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346047201.194:4380): user pid=7405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346047201.202:4381): pid=7405 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=504 >type=USER_START msg=audit(1346047201.211:4382): user pid=7405 uid=0 auid=0 ses=504 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346047201.246:4383): user pid=7405 uid=0 auid=0 ses=504 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346047201.246:4384): user pid=7405 uid=0 auid=0 ses=504 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=MAC_CONFIG_CHANGE msg=audit(1346047251.487:4385): bool=virt_use_nfs val=0 old_val=1 auid=0 ses=491 >type=SYSCALL msg=audit(1346047251.487:4385): arch=c000003e syscall=1 success=yes exit=2 a0=3 a1=7ffff78e0460 a2=2 a3=fffffff8 items=0 ppid=5855 pid=7414 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=491 comm="setsebool" exe="/usr/sbin/setsebool" subj=unconfined_u:unconfined_r:setsebool_t:s0-s0:c0.c1023 key=(null) >type=USER_ACCT msg=audit(1346047261.270:4386): user pid=7415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346047261.270:4387): user pid=7415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346047261.277:4388): pid=7415 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=505 >type=USER_START msg=audit(1346047261.285:4389): user pid=7415 uid=0 auid=0 ses=505 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346047261.318:4390): user pid=7415 uid=0 auid=0 ses=505 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346047261.318:4391): user pid=7415 uid=0 auid=0 ses=505 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=NETFILTER_CFG msg=audit(1346047261.692:4392): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1346047261.692:4392): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=238b600 items=0 ppid=5855 pid=7427 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=491 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=MAC_CONFIG_CHANGE msg=audit(1346047275.936:4393): bool=virt_use_nfs val=1 old_val=0 auid=0 ses=491 >type=SYSCALL msg=audit(1346047275.936:4393): arch=c000003e syscall=1 success=yes exit=2 a0=3 a1=7fff95c51550 a2=2 a3=fffffff8 items=0 ppid=5855 pid=7428 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=491 comm="setsebool" exe="/usr/sbin/setsebool" subj=unconfined_u:unconfined_r:setsebool_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1346047291.051:4394): user pid=7432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=7432 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346047291.052:4395): user pid=7432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=7432 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346047291.053:4396): user pid=7431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=7432 suid=74 rport=55096 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346047291.054:4397): user pid=7431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=7432 suid=74 rport=55096 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346047294.392:4398): user pid=7431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1346047297.304:4399): user pid=7431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1346047297.307:4400): user pid=7431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346047297.307:4401): user pid=7431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7432 suid=74 rport=55096 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346047297.308:4402): user pid=7431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1346047297.308:4403): user pid=7431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1346047297.308:4404): pid=7431 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=506 >type=USER_ROLE_CHANGE msg=audit(1346047297.378:4405): user pid=7431 uid=0 auid=0 ses=506 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346047297.380:4406): user pid=7431 uid=0 auid=0 ses=506 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1346047297.380:4407): user pid=7431 uid=0 auid=0 ses=506 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346047297.381:4408): user pid=7431 uid=0 auid=0 ses=506 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346047297.381:4409): user pid=7435 uid=0 auid=0 ses=506 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=7435 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346047297.381:4410): user pid=7435 uid=0 auid=0 ses=506 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=7435 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRED_REFR msg=audit(1346047297.382:4411): user pid=7435 uid=0 auid=0 ses=506 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=VIRT_MACHINE_ID msg=audit(1346047297.541:4412): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346047297.541:4413): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346047297.541:4414): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=none exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047297.662:4415): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047297.664:4416): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047297.665:4417): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047297.665:4418): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047297.665:4419): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047297.665:4420): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047297.665:4421): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047297.665:4422): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047297.666:4423): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047297.666:4424): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1346047297.666:4425): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047297.666:4426): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047297.693:4427): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="macvtap0" rdev=? exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047297.693:4428): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1346047297.748:4429): avc: denied { read write } for pid=7455 comm="qemu-kvm" path="/dev/tap35" dev=devtmpfs ino=114715 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1346047297.748:4429): arch=c000003e syscall=59 success=yes exit=0 a0=7f2ca0005f60 a1=7f2ca0006680 a2=7f2ca00055b0 a3=18 items=0 ppid=1 pid=7455 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=459 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1346047297.841:4430): avc: denied { getattr } for pid=7455 comm="qemu-kvm" name="/" dev=0:1b ino=101 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:nfs_t:s0 tclass=filesystem >type=SYSCALL msg=audit(1346047297.841:4430): arch=c000003e syscall=138 success=no exit=-13 a0=9 a1=7fff94553960 a2=3 a3=48 items=0 ppid=1 pid=7455 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=459 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1346047298.095:4431): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-disk="?" new-disk="/mnt/testkf8.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047298.095:4432): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047298.095:4433): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047298.095:4434): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346047298.095:4435): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=migrated vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=7455 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346047303.051:4436): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=failed vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1346047303.196:4437): user pid=7431 uid=0 auid=0 ses=506 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1346047303.196:4438): user pid=7431 uid=0 auid=0 ses=506 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1346047303.196:4439): user pid=7431 uid=0 auid=0 ses=506 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1346047303.196:4440): user pid=7431 uid=0 auid=0 ses=506 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346047303.196:4441): user pid=7431 uid=0 auid=0 ses=506 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=7431 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346047303.197:4442): user pid=7431 uid=0 auid=0 ses=506 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=7431 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346047303.197:4443): user pid=7431 uid=0 auid=0 ses=506 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7431 suid=0 rport=55096 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1346047318.162:4444): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1346047318.162:4444): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=2561600 items=0 ppid=5855 pid=7501 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=491 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1346047320.662:4445): user pid=7503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=7503 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346047320.663:4446): user pid=7503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=7503 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346047320.663:4447): user pid=7502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=7503 suid=74 rport=55100 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346047320.663:4448): user pid=7502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=7503 suid=74 rport=55100 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346047323.989:4449): user pid=7502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1346047326.713:4450): user pid=7502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1346047326.716:4451): user pid=7502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346047326.716:4452): user pid=7502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7503 suid=74 rport=55100 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346047326.717:4453): user pid=7502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1346047326.717:4454): user pid=7502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1346047326.717:4455): pid=7502 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=507 >type=USER_ROLE_CHANGE msg=audit(1346047326.787:4456): user pid=7502 uid=0 auid=0 ses=507 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346047326.790:4457): user pid=7502 uid=0 auid=0 ses=507 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1346047326.792:4458): user pid=7502 uid=0 auid=0 ses=507 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346047326.792:4459): user pid=7502 uid=0 auid=0 ses=507 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346047326.793:4460): user pid=7506 uid=0 auid=0 ses=507 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=7506 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346047326.793:4461): user pid=7506 uid=0 auid=0 ses=507 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=7506 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRED_REFR msg=audit(1346047326.793:4462): user pid=7506 uid=0 auid=0 ses=507 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=VIRT_MACHINE_ID msg=audit(1346047326.937:4463): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346047326.937:4464): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346047326.937:4465): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=none exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047327.063:4466): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047327.065:4467): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047327.066:4468): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047327.066:4469): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047327.066:4470): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047327.066:4471): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047327.066:4472): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047327.066:4473): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047327.066:4474): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047327.067:4475): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1346047327.067:4476): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047327.067:4477): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047327.087:4478): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="macvtap0" rdev=? exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047327.087:4479): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1346047327.139:4480): avc: denied { read write } for pid=7526 comm="qemu-kvm" path="/dev/tap36" dev=devtmpfs ino=115127 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1346047327.139:4480): arch=c000003e syscall=59 success=yes exit=0 a0=7f2c880c5f60 a1=7f2c880c66f0 a2=7f2c880c5840 a3=18 items=0 ppid=1 pid=7526 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=459 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1346047327.229:4481): avc: denied { getattr } for pid=7526 comm="qemu-kvm" name="/" dev=0:1b ino=101 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:nfs_t:s0 tclass=filesystem >type=SYSCALL msg=audit(1346047327.229:4481): arch=c000003e syscall=138 success=no exit=-13 a0=9 a1=7fff1c100710 a2=3 a3=48 items=0 ppid=1 pid=7526 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=459 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1346047327.498:4482): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-disk="?" new-disk="/mnt/testkf8.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047327.498:4483): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047327.498:4484): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047327.498:4485): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346047327.498:4486): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=migrated vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=7526 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346047332.574:4487): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=failed vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1346047332.715:4488): user pid=7502 uid=0 auid=0 ses=507 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1346047332.715:4489): user pid=7502 uid=0 auid=0 ses=507 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1346047332.715:4490): user pid=7502 uid=0 auid=0 ses=507 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1346047332.716:4491): user pid=7502 uid=0 auid=0 ses=507 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346047332.716:4492): user pid=7502 uid=0 auid=0 ses=507 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=7502 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346047332.716:4493): user pid=7502 uid=0 auid=0 ses=507 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=7502 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346047332.716:4494): user pid=7502 uid=0 auid=0 ses=507 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7502 suid=0 rport=55100 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=MAC_STATUS msg=audit(1346047340.999:4495): enforcing=0 old_enforcing=1 auid=0 ses=491 >type=SYSCALL msg=audit(1346047340.999:4495): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff8dc5bec0 a2=1 a3=fffffff8 items=0 ppid=5855 pid=7566 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=491 comm="setenforce" exe="/usr/sbin/setenforce" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1346047343.617:4496): user pid=7568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=7568 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346047343.617:4497): user pid=7568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=7568 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346047343.618:4498): user pid=7567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=7568 suid=74 rport=55107 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346047343.618:4499): user pid=7567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=7568 suid=74 rport=55107 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346047346.850:4500): user pid=7567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1346047348.826:4501): user pid=7567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1346047348.828:4502): user pid=7567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346047348.828:4503): user pid=7567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7568 suid=74 rport=55107 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346047348.829:4504): user pid=7567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1346047348.829:4505): user pid=7567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1346047348.829:4506): pid=7567 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=508 >type=USER_ROLE_CHANGE msg=audit(1346047348.898:4507): user pid=7567 uid=0 auid=0 ses=508 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346047348.901:4508): user pid=7567 uid=0 auid=0 ses=508 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1346047348.902:4509): user pid=7567 uid=0 auid=0 ses=508 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346047348.902:4510): user pid=7567 uid=0 auid=0 ses=508 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346047348.903:4511): user pid=7571 uid=0 auid=0 ses=508 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=7571 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346047348.903:4512): user pid=7571 uid=0 auid=0 ses=508 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=7571 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRED_REFR msg=audit(1346047348.904:4513): user pid=7571 uid=0 auid=0 ses=508 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=VIRT_MACHINE_ID msg=audit(1346047349.056:4514): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346047349.056:4515): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346047349.056:4516): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=none exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047349.178:4517): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047349.180:4518): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047349.180:4519): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047349.181:4520): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047349.181:4521): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047349.181:4522): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047349.181:4523): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047349.181:4524): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047349.181:4525): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047349.181:4526): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1346047349.182:4527): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047349.182:4528): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047349.215:4529): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="macvtap0" rdev=? exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047349.215:4530): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1346047349.268:4531): avc: denied { read write } for pid=7591 comm="qemu-kvm" path="/dev/tap37" dev=devtmpfs ino=115514 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1346047349.268:4531): arch=c000003e syscall=59 success=yes exit=0 a0=7f2c880056f0 a1=7f2c88005eb0 a2=7f2c88004d40 a3=18 items=0 ppid=1 pid=7591 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=459 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1346047349.364:4532): avc: denied { getattr } for pid=7591 comm="qemu-kvm" name="/" dev=0:1b ino=101 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:nfs_t:s0 tclass=filesystem >type=SYSCALL msg=audit(1346047349.364:4532): arch=c000003e syscall=138 success=yes exit=0 a0=9 a1=7fff1bd55ca0 a2=3 a3=48 items=0 ppid=1 pid=7591 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=459 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1346047349.601:4533): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-disk="?" new-disk="/mnt/testkf8.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047349.601:4534): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047349.601:4535): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047349.601:4536): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346047349.601:4537): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=migrated vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=7591 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1346047354.785:4538): user pid=7567 uid=0 auid=0 ses=508 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1346047354.785:4539): user pid=7567 uid=0 auid=0 ses=508 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1346047354.786:4540): user pid=7567 uid=0 auid=0 ses=508 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1346047354.786:4541): user pid=7567 uid=0 auid=0 ses=508 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346047354.786:4542): user pid=7567 uid=0 auid=0 ses=508 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=7567 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346047354.786:4543): user pid=7567 uid=0 auid=0 ses=508 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=7567 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346047354.787:4544): user pid=7567 uid=0 auid=0 ses=508 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7567 suid=0 rport=55107 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346047397.102:4545): user pid=7628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=7628 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346047397.102:4546): user pid=7628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=7628 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346047397.104:4547): user pid=7627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=7628 suid=74 rport=55118 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346047397.104:4548): user pid=7627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=7628 suid=74 rport=55118 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346047400.498:4549): user pid=7627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1346047402.316:4550): user pid=7627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1346047402.319:4551): user pid=7627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346047402.320:4552): user pid=7627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7628 suid=74 rport=55118 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346047402.320:4553): user pid=7627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1346047402.321:4554): user pid=7627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1346047402.321:4555): pid=7627 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=509 >type=USER_ROLE_CHANGE msg=audit(1346047402.386:4556): user pid=7627 uid=0 auid=0 ses=509 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346047402.389:4557): user pid=7627 uid=0 auid=0 ses=509 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1346047402.390:4558): user pid=7627 uid=0 auid=0 ses=509 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346047402.391:4559): user pid=7627 uid=0 auid=0 ses=509 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346047402.392:4560): user pid=7631 uid=0 auid=0 ses=509 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=7631 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346047402.392:4561): user pid=7631 uid=0 auid=0 ses=509 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=7631 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRED_REFR msg=audit(1346047402.392:4562): user pid=7631 uid=0 auid=0 ses=509 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1346047440.798:4563): user pid=7627 uid=0 auid=0 ses=509 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1346047440.798:4564): user pid=7627 uid=0 auid=0 ses=509 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1346047440.798:4565): user pid=7627 uid=0 auid=0 ses=509 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1346047440.798:4566): user pid=7627 uid=0 auid=0 ses=509 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346047440.798:4567): user pid=7627 uid=0 auid=0 ses=509 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=7627 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346047440.799:4568): user pid=7627 uid=0 auid=0 ses=509 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=7627 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346047440.799:4569): user pid=7627 uid=0 auid=0 ses=509 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7627 suid=0 rport=55118 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346047441.088:4570): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=MAC_STATUS msg=audit(1346047446.918:4571): enforcing=1 old_enforcing=0 auid=0 ses=491 >type=SYSCALL msg=audit(1346047446.918:4571): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff0835a3d0 a2=1 a3=fffffff8 items=0 ppid=5855 pid=7663 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=491 comm="setenforce" exe="/usr/sbin/setenforce" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1346047537.994:4572): user pid=7673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=7673 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346047537.995:4573): user pid=7673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=7673 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346047537.996:4574): user pid=7672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=7673 suid=74 rport=55146 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346047537.996:4575): user pid=7672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=7673 suid=74 rport=55146 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346047541.776:4576): user pid=7672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1346047544.246:4577): user pid=7672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1346047544.248:4578): user pid=7672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346047544.249:4579): user pid=7672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7673 suid=74 rport=55146 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346047544.249:4580): user pid=7672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1346047544.250:4581): user pid=7672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1346047544.250:4582): pid=7672 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=510 >type=USER_ROLE_CHANGE msg=audit(1346047544.320:4583): user pid=7672 uid=0 auid=0 ses=510 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346047544.322:4584): user pid=7672 uid=0 auid=0 ses=510 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1346047544.324:4585): user pid=7672 uid=0 auid=0 ses=510 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346047544.325:4586): user pid=7672 uid=0 auid=0 ses=510 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346047544.326:4587): user pid=7682 uid=0 auid=0 ses=510 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=7682 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346047544.326:4588): user pid=7682 uid=0 auid=0 ses=510 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=7682 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRED_REFR msg=audit(1346047544.326:4589): user pid=7682 uid=0 auid=0 ses=510 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=VIRT_MACHINE_ID msg=audit(1346047544.494:4590): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346047544.494:4591): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346047544.494:4592): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=none exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047544.610:4593): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047544.613:4594): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047544.614:4595): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047544.614:4596): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047544.614:4597): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047544.614:4598): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047544.614:4599): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047544.614:4600): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047544.615:4601): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047544.615:4602): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1346047544.615:4603): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047544.615:4604): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047544.641:4605): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="macvtap0" rdev=? exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047544.641:4606): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1346047544.697:4607): avc: denied { read write } for pid=7702 comm="qemu-kvm" path="/dev/tap38" dev=devtmpfs ino=116144 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1346047544.697:4607): arch=c000003e syscall=59 success=yes exit=0 a0=7f2c9c00d990 a1=7f2c9c00e120 a2=7f2c9c00d270 a3=18 items=0 ppid=1 pid=7702 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=459 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1346047544.791:4608): avc: denied { getattr } for pid=7702 comm="qemu-kvm" name="/" dev=0:1b ino=101 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:nfs_t:s0 tclass=filesystem >type=SYSCALL msg=audit(1346047544.791:4608): arch=c000003e syscall=138 success=no exit=-13 a0=9 a1=7fffd8dfe260 a2=3 a3=48 items=0 ppid=1 pid=7702 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=459 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1346047545.039:4609): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-disk="?" new-disk="/mnt/testkf8.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047545.039:4610): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047545.039:4611): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346047545.039:4612): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346047545.039:4613): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=migrated vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=7702 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346047550.103:4614): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=failed vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1346047550.249:4615): user pid=7672 uid=0 auid=0 ses=510 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1346047550.249:4616): user pid=7672 uid=0 auid=0 ses=510 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1346047550.250:4617): user pid=7672 uid=0 auid=0 ses=510 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1346047550.250:4618): user pid=7672 uid=0 auid=0 ses=510 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346047550.250:4619): user pid=7672 uid=0 auid=0 ses=510 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=7672 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346047550.250:4620): user pid=7672 uid=0 auid=0 ses=510 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=7672 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346047550.250:4621): user pid=7672 uid=0 auid=0 ses=510 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7672 suid=0 rport=55146 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_ACCT msg=audit(1346047801.367:4622): user pid=7766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346047801.368:4623): user pid=7766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346047801.369:4624): pid=7766 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=511 >type=USER_START msg=audit(1346047801.375:4625): user pid=7766 uid=0 auid=0 ses=511 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346047801.458:4626): user pid=7766 uid=0 auid=0 ses=511 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346047801.458:4627): user pid=7766 uid=0 auid=0 ses=511 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRYPTO_KEY_USER msg=audit(1346048030.528:4628): user pid=7794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=7794 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346048030.528:4629): user pid=7794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=7794 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346048030.530:4630): user pid=7793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=7794 suid=74 rport=55236 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346048030.530:4631): user pid=7793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=7794 suid=74 rport=55236 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346048034.683:4632): user pid=7793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1346048041.992:4633): user pid=7793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1346048041.995:4634): user pid=7793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346048041.996:4635): user pid=7793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7794 suid=74 rport=55236 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346048041.997:4636): user pid=7793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1346048041.997:4637): user pid=7793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1346048041.997:4638): pid=7793 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=512 >type=USER_ROLE_CHANGE msg=audit(1346048042.068:4639): user pid=7793 uid=0 auid=0 ses=512 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346048042.071:4640): user pid=7793 uid=0 auid=0 ses=512 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1346048042.073:4641): user pid=7793 uid=0 auid=0 ses=512 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346048042.073:4642): user pid=7793 uid=0 auid=0 ses=512 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346048042.074:4643): user pid=7797 uid=0 auid=0 ses=512 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=7797 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346048042.074:4644): user pid=7797 uid=0 auid=0 ses=512 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=7797 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRED_REFR msg=audit(1346048042.074:4645): user pid=7797 uid=0 auid=0 ses=512 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=VIRT_MACHINE_ID msg=audit(1346048042.250:4646): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346048042.250:4647): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346048042.250:4648): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=none exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048042.367:4649): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048042.374:4650): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048042.374:4651): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048042.374:4652): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048042.375:4653): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048042.375:4654): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048042.375:4655): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048042.375:4656): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048042.375:4657): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048042.375:4658): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1346048042.376:4659): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048042.376:4660): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048042.393:4661): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="macvtap0" rdev=? exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048042.393:4662): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1346048042.444:4663): avc: denied { read write } for pid=7817 comm="qemu-kvm" path="/dev/tap39" dev=devtmpfs ino=116662 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1346048042.444:4663): arch=c000003e syscall=59 success=yes exit=0 a0=7f2ca0006040 a1=7f2ca0006850 a2=7f2ca0005690 a3=18 items=0 ppid=1 pid=7817 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=459 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1346048042.537:4664): avc: denied { getattr } for pid=7817 comm="qemu-kvm" name="/" dev=0:1b ino=101 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:nfs_t:s0 tclass=filesystem >type=SYSCALL msg=audit(1346048042.537:4664): arch=c000003e syscall=138 success=no exit=-13 a0=9 a1=7fffecdd79d0 a2=3 a3=48 items=0 ppid=1 pid=7817 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=459 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1346048042.816:4665): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-disk="?" new-disk="/mnt/testkf8.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048042.816:4666): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048042.816:4667): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048042.816:4668): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346048042.816:4669): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=migrated vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=7817 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346048047.845:4670): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=failed vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1346048047.991:4671): user pid=7793 uid=0 auid=0 ses=512 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1346048047.991:4672): user pid=7793 uid=0 auid=0 ses=512 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1346048047.992:4673): user pid=7793 uid=0 auid=0 ses=512 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1346048047.992:4674): user pid=7793 uid=0 auid=0 ses=512 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346048047.992:4675): user pid=7793 uid=0 auid=0 ses=512 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=7793 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346048047.992:4676): user pid=7793 uid=0 auid=0 ses=512 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=7793 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346048047.992:4677): user pid=7793 uid=0 auid=0 ses=512 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7793 suid=0 rport=55236 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346048113.206:4678): user pid=7864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=7864 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346048113.206:4679): user pid=7864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=7864 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346048113.206:4680): user pid=7863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=7864 suid=74 rport=55251 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346048113.207:4681): user pid=7863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=7864 suid=74 rport=55251 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346048116.670:4682): user pid=7863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1346048123.483:4683): user pid=7863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1346048123.483:4684): user pid=7863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1346048126.807:4685): user pid=7863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1346048126.810:4686): user pid=7863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346048126.810:4687): user pid=7863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7864 suid=74 rport=55251 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346048126.811:4688): user pid=7863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1346048126.811:4689): user pid=7863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1346048126.811:4690): pid=7863 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=513 >type=USER_ROLE_CHANGE msg=audit(1346048126.878:4691): user pid=7863 uid=0 auid=0 ses=513 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346048126.882:4692): user pid=7863 uid=0 auid=0 ses=513 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1346048126.883:4693): user pid=7863 uid=0 auid=0 ses=513 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346048126.884:4694): user pid=7863 uid=0 auid=0 ses=513 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346048126.885:4695): user pid=7868 uid=0 auid=0 ses=513 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=7868 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346048126.885:4696): user pid=7868 uid=0 auid=0 ses=513 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=7868 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRED_REFR msg=audit(1346048126.885:4697): user pid=7868 uid=0 auid=0 ses=513 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=VIRT_MACHINE_ID msg=audit(1346048127.054:4698): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346048127.054:4699): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346048127.054:4700): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=none exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048127.185:4701): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048127.187:4702): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048127.188:4703): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048127.188:4704): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048127.188:4705): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048127.188:4706): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048127.188:4707): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048127.188:4708): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048127.189:4709): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048127.189:4710): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1346048127.189:4711): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048127.189:4712): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048127.216:4713): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="macvtap0" rdev=? exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048127.216:4714): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1346048127.270:4715): avc: denied { read write } for pid=7888 comm="qemu-kvm" path="/dev/tap40" dev=devtmpfs ino=117069 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1346048127.270:4715): arch=c000003e syscall=59 success=yes exit=0 a0=7f2c9c005620 a1=7f2c9c005db0 a2=7f2c9c004f00 a3=18 items=0 ppid=1 pid=7888 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=459 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1346048127.372:4716): avc: denied { getattr } for pid=7888 comm="qemu-kvm" name="/" dev=0:1b ino=101 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:nfs_t:s0 tclass=filesystem >type=SYSCALL msg=audit(1346048127.372:4716): arch=c000003e syscall=138 success=no exit=-13 a0=9 a1=7fff6f48c800 a2=3 a3=48 items=0 ppid=1 pid=7888 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=459 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1346048127.626:4717): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-disk="?" new-disk="/mnt/testkf8.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048127.626:4718): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048127.626:4719): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048127.626:4720): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346048127.626:4721): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=migrated vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=7888 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346048132.636:4722): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=failed vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1346048132.772:4723): user pid=7863 uid=0 auid=0 ses=513 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1346048132.772:4724): user pid=7863 uid=0 auid=0 ses=513 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1346048132.772:4725): user pid=7863 uid=0 auid=0 ses=513 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1346048132.772:4726): user pid=7863 uid=0 auid=0 ses=513 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346048132.772:4727): user pid=7863 uid=0 auid=0 ses=513 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=7863 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346048132.773:4728): user pid=7863 uid=0 auid=0 ses=513 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=7863 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346048132.773:4729): user pid=7863 uid=0 auid=0 ses=513 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7863 suid=0 rport=55251 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=MAC_STATUS msg=audit(1346048235.477:4730): enforcing=0 old_enforcing=1 auid=0 ses=491 >type=SYSCALL msg=audit(1346048235.477:4730): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff787482d0 a2=1 a3=fffffff8 items=0 ppid=5855 pid=7940 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=491 comm="setenforce" exe="/usr/sbin/setenforce" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1346048237.852:4731): user pid=7942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=7942 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346048237.852:4732): user pid=7942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=7942 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346048237.853:4733): user pid=7941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=7942 suid=74 rport=55277 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346048237.854:4734): user pid=7941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=7942 suid=74 rport=55277 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346048241.257:4735): user pid=7941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1346048242.943:4736): user pid=7941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1346048242.946:4737): user pid=7941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346048242.946:4738): user pid=7941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7942 suid=74 rport=55277 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346048242.947:4739): user pid=7941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1346048242.947:4740): user pid=7941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1346048242.947:4741): pid=7941 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=514 >type=USER_ROLE_CHANGE msg=audit(1346048243.014:4742): user pid=7941 uid=0 auid=0 ses=514 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346048243.017:4743): user pid=7941 uid=0 auid=0 ses=514 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1346048243.019:4744): user pid=7941 uid=0 auid=0 ses=514 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346048243.019:4745): user pid=7941 uid=0 auid=0 ses=514 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346048243.020:4746): user pid=7945 uid=0 auid=0 ses=514 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=7945 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346048243.020:4747): user pid=7945 uid=0 auid=0 ses=514 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=7945 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRED_REFR msg=audit(1346048243.021:4748): user pid=7945 uid=0 auid=0 ses=514 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=VIRT_MACHINE_ID msg=audit(1346048243.179:4749): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346048243.179:4750): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346048243.179:4751): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=none exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048243.303:4752): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048243.305:4753): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048243.305:4754): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048243.305:4755): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048243.306:4756): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048243.306:4757): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048243.306:4758): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048243.306:4759): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048243.306:4760): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048243.306:4761): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1346048243.306:4762): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048243.307:4763): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048243.332:4764): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="macvtap0" rdev=? exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048243.332:4765): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1346048243.403:4766): avc: denied { read write } for pid=7965 comm="qemu-kvm" path="/dev/tap41" dev=devtmpfs ino=117485 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1346048243.403:4766): arch=c000003e syscall=59 success=yes exit=0 a0=7f2ca4169e30 a1=7f2ca41dbc70 a2=7f2ca416c200 a3=18 items=0 ppid=1 pid=7965 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=459 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1346048243.501:4767): avc: denied { getattr } for pid=7965 comm="qemu-kvm" name="/" dev=0:1b ino=101 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:nfs_t:s0 tclass=filesystem >type=SYSCALL msg=audit(1346048243.501:4767): arch=c000003e syscall=138 success=yes exit=0 a0=9 a1=7fff5bd84bb0 a2=3 a3=48 items=0 ppid=1 pid=7965 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=459 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1346048243.755:4768): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-disk="?" new-disk="/mnt/testkf8.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048243.755:4769): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048243.755:4770): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048243.755:4771): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346048243.756:4772): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=migrated vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=7965 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1346048249.065:4773): user pid=7941 uid=0 auid=0 ses=514 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1346048249.065:4774): user pid=7941 uid=0 auid=0 ses=514 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1346048249.065:4775): user pid=7941 uid=0 auid=0 ses=514 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1346048249.065:4776): user pid=7941 uid=0 auid=0 ses=514 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346048249.066:4777): user pid=7941 uid=0 auid=0 ses=514 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=7941 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346048249.066:4778): user pid=7941 uid=0 auid=0 ses=514 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=7941 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346048249.066:4779): user pid=7941 uid=0 auid=0 ses=514 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7941 suid=0 rport=55277 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346048267.979:4780): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1346048401.492:4781): user pid=8029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346048401.493:4782): user pid=8029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346048401.500:4783): pid=8029 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=515 >type=USER_START msg=audit(1346048401.507:4784): user pid=8029 uid=0 auid=0 ses=515 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346048401.582:4785): user pid=8029 uid=0 auid=0 ses=515 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346048401.582:4786): user pid=8029 uid=0 auid=0 ses=515 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRYPTO_KEY_USER msg=audit(1346048411.682:4787): user pid=8033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8033 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346048411.682:4788): user pid=8033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8033 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346048411.683:4789): user pid=8032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=8033 suid=74 rport=55319 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346048411.683:4790): user pid=8032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=8033 suid=74 rport=55319 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346048417.299:4791): user pid=8032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1346048419.201:4792): user pid=8032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1346048419.203:4793): user pid=8032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346048419.204:4794): user pid=8032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8033 suid=74 rport=55319 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346048419.205:4795): user pid=8032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1346048419.205:4796): user pid=8032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1346048419.205:4797): pid=8032 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=516 >type=USER_ROLE_CHANGE msg=audit(1346048419.275:4798): user pid=8032 uid=0 auid=0 ses=516 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346048419.278:4799): user pid=8032 uid=0 auid=0 ses=516 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1346048419.280:4800): user pid=8032 uid=0 auid=0 ses=516 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346048419.280:4801): user pid=8032 uid=0 auid=0 ses=516 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346048419.281:4802): user pid=8036 uid=0 auid=0 ses=516 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8036 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346048419.281:4803): user pid=8036 uid=0 auid=0 ses=516 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8036 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRED_REFR msg=audit(1346048419.281:4804): user pid=8036 uid=0 auid=0 ses=516 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=VIRT_MACHINE_ID msg=audit(1346048419.450:4805): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346048419.450:4806): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346048419.450:4807): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=none exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048419.587:4808): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048419.590:4809): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048419.591:4810): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048419.591:4811): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048419.591:4812): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048419.591:4813): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048419.591:4814): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048419.591:4815): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048419.592:4816): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048419.592:4817): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1346048419.592:4818): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048419.592:4819): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048419.617:4820): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="macvtap0" rdev=? exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048419.617:4821): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1346048419.666:4822): avc: denied { read write } for pid=8056 comm="qemu-kvm" path="/dev/tap42" dev=devtmpfs ino=117973 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1346048419.666:4822): arch=c000003e syscall=59 success=yes exit=0 a0=7f2ca0005cc0 a1=7f2ca0006390 a2=7f2ca00055a0 a3=18 items=0 ppid=1 pid=8056 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=459 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1346048419.759:4823): avc: denied { getattr } for pid=8056 comm="qemu-kvm" name="/" dev=0:1b ino=101 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:nfs_t:s0 tclass=filesystem >type=SYSCALL msg=audit(1346048419.759:4823): arch=c000003e syscall=138 success=yes exit=0 a0=9 a1=7fff09bd9c70 a2=3 a3=48 items=0 ppid=1 pid=8056 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=459 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1346048420.025:4824): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-disk="?" new-disk="/mnt/testkf8.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048420.025:4825): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048420.025:4826): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048420.025:4827): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346048420.025:4828): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=migrated vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=8056 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1346048425.473:4829): user pid=8032 uid=0 auid=0 ses=516 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1346048425.473:4830): user pid=8032 uid=0 auid=0 ses=516 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1346048425.474:4831): user pid=8032 uid=0 auid=0 ses=516 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1346048425.474:4832): user pid=8032 uid=0 auid=0 ses=516 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346048425.474:4833): user pid=8032 uid=0 auid=0 ses=516 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8032 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346048425.474:4834): user pid=8032 uid=0 auid=0 ses=516 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8032 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346048425.474:4835): user pid=8032 uid=0 auid=0 ses=516 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8032 suid=0 rport=55319 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346048437.911:4836): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=MAC_STATUS msg=audit(1346048449.793:4837): enforcing=1 old_enforcing=0 auid=0 ses=491 >type=SYSCALL msg=audit(1346048449.793:4837): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff60040790 a2=1 a3=fffffff8 items=0 ppid=5855 pid=8105 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=491 comm="setenforce" exe="/usr/sbin/setenforce" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1346048499.517:4838): user pid=8107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8107 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346048499.517:4839): user pid=8107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8107 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346048499.519:4840): user pid=8106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=8107 suid=74 rport=55340 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346048499.519:4841): user pid=8106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=8107 suid=74 rport=55340 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346048506.195:4842): user pid=8106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1346048507.924:4843): user pid=8106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1346048507.927:4844): user pid=8106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346048507.927:4845): user pid=8106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8107 suid=74 rport=55340 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346048507.928:4846): user pid=8106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1346048507.928:4847): user pid=8106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1346048507.928:4848): pid=8106 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=517 >type=USER_ROLE_CHANGE msg=audit(1346048507.995:4849): user pid=8106 uid=0 auid=0 ses=517 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346048507.997:4850): user pid=8106 uid=0 auid=0 ses=517 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1346048507.998:4851): user pid=8106 uid=0 auid=0 ses=517 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346048507.998:4852): user pid=8106 uid=0 auid=0 ses=517 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346048507.998:4853): user pid=8116 uid=0 auid=0 ses=517 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8116 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346048507.998:4854): user pid=8116 uid=0 auid=0 ses=517 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8116 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRED_REFR msg=audit(1346048507.999:4855): user pid=8116 uid=0 auid=0 ses=517 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=VIRT_MACHINE_ID msg=audit(1346048508.168:4856): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346048508.168:4857): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346048508.168:4858): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=none exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048508.287:4859): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048508.291:4860): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048508.291:4861): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048508.291:4862): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048508.291:4863): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048508.291:4864): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048508.291:4865): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048508.291:4866): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048508.292:4867): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048508.292:4868): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1346048508.292:4869): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048508.292:4870): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048508.323:4871): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="macvtap0" rdev=? exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048508.324:4872): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1346048508.396:4873): avc: denied { read write } for pid=8136 comm="qemu-kvm" path="/dev/tap43" dev=devtmpfs ino=118410 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1346048508.396:4873): arch=c000003e syscall=59 success=yes exit=0 a0=7f2c88005450 a1=7f2c88005b20 a2=7f2c88004d30 a3=18 items=0 ppid=1 pid=8136 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=459 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1346048508.500:4874): avc: denied { getattr } for pid=8136 comm="qemu-kvm" name="/" dev=0:1b ino=101 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:nfs_t:s0 tclass=filesystem >type=SYSCALL msg=audit(1346048508.500:4874): arch=c000003e syscall=138 success=no exit=-13 a0=9 a1=7fffba7fa9c0 a2=3 a3=48 items=0 ppid=1 pid=8136 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=459 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1346048508.721:4875): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-disk="?" new-disk="/mnt/testkf8.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048508.721:4876): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048508.721:4877): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346048508.721:4878): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346048508.721:4879): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=migrated vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=8136 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346048514.154:4880): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=failed vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1346048514.304:4881): user pid=8106 uid=0 auid=0 ses=517 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1346048514.304:4882): user pid=8106 uid=0 auid=0 ses=517 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1346048514.304:4883): user pid=8106 uid=0 auid=0 ses=517 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1346048514.304:4884): user pid=8106 uid=0 auid=0 ses=517 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346048514.304:4885): user pid=8106 uid=0 auid=0 ses=517 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8106 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346048514.304:4886): user pid=8106 uid=0 auid=0 ses=517 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8106 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346048514.304:4887): user pid=8106 uid=0 auid=0 ses=517 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8106 suid=0 rport=55340 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_ACCT msg=audit(1346049001.613:4888): user pid=8225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346049001.613:4889): user pid=8225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346049001.620:4890): pid=8225 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=518 >type=USER_START msg=audit(1346049001.627:4891): user pid=8225 uid=0 auid=0 ses=518 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346049001.669:4892): user pid=8225 uid=0 auid=0 ses=518 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346049001.669:4893): user pid=8225 uid=0 auid=0 ses=518 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRYPTO_KEY_USER msg=audit(1346049218.232:4894): user pid=8251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8251 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.4.196 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346049218.232:4895): user pid=8251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8251 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.4.196 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346049218.234:4896): user pid=8250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=8251 suid=74 rport=34988 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.4.196 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346049218.234:4897): user pid=8250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=8251 suid=74 rport=34988 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.4.196 terminal=? res=success' >type=USER_AUTH msg=audit(1346049219.564:4898): user pid=8250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.4.196 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1346049220.650:4899): user pid=8250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.4.196 addr=10.66.4.196 terminal=ssh res=success' >type=USER_ACCT msg=audit(1346049220.653:4900): user pid=8250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.4.196 addr=10.66.4.196 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346049220.654:4901): user pid=8250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8251 suid=74 rport=34988 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.4.196 terminal=? res=success' >type=USER_AUTH msg=audit(1346049220.655:4902): user pid=8250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.4.196 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1346049220.655:4903): user pid=8250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.4.196 addr=10.66.4.196 terminal=ssh res=success' >type=LOGIN msg=audit(1346049220.655:4904): pid=8250 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=519 >type=USER_ROLE_CHANGE msg=audit(1346049220.726:4905): user pid=8250 uid=0 auid=0 ses=519 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.4.196 addr=10.66.4.196 terminal=ssh res=success' >type=USER_START msg=audit(1346049220.728:4906): user pid=8250 uid=0 auid=0 ses=519 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.4.196 addr=10.66.4.196 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1346049220.733:4907): user pid=8254 uid=0 auid=0 ses=519 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.4.196 addr=10.66.4.196 terminal=/dev/pts/1 res=success' >type=USER_START msg=audit(1346049220.733:4908): user pid=8254 uid=0 auid=0 ses=519 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.4.196 addr=10.66.4.196 terminal=/dev/pts/1 res=success' >type=CRYPTO_KEY_USER msg=audit(1346049220.734:4909): user pid=8254 uid=0 auid=0 ses=519 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8254 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.4.196 terminal=pts/1 res=success' >type=CRYPTO_KEY_USER msg=audit(1346049220.734:4910): user pid=8254 uid=0 auid=0 ses=519 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8254 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.4.196 terminal=pts/1 res=success' >type=CRED_REFR msg=audit(1346049220.734:4911): user pid=8254 uid=0 auid=0 ses=519 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.4.196 addr=10.66.4.196 terminal=ssh res=success' >type=VIRT_MACHINE_ID msg=audit(1346049362.478:4912): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346049362.478:4913): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346049362.478:4914): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=stack exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346049362.478:4915): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=none exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346049362.586:4916): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346049362.589:4917): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346049362.590:4918): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346049362.590:4919): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346049362.590:4920): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346049362.590:4921): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346049362.590:4922): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346049362.590:4923): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346049362.591:4924): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346049362.591:4925): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1346049362.591:4926): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346049362.591:4927): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346049362.608:4928): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="macvtap0" rdev=? exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346049362.608:4929): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1346049362.659:4930): avc: denied { read write } for pid=8317 comm="qemu-kvm" path="/dev/tap44" dev=devtmpfs ino=119148 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1346049362.659:4930): arch=c000003e syscall=59 success=yes exit=0 a0=7f2c8800bed0 a1=7f2c8800c640 a2=7f2c88003160 a3=18 items=0 ppid=1 pid=8317 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=459 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1346049362.749:4931): avc: denied { getattr } for pid=8317 comm="qemu-kvm" name="/" dev=0:1b ino=101 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:nfs_t:s0 tclass=filesystem >type=SYSCALL msg=audit(1346049362.749:4931): arch=c000003e syscall=138 success=no exit=-13 a0=9 a1=7fff64b84e50 a2=3 a3=48 items=0 ppid=1 pid=8317 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=459 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1346049363.020:4932): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-disk="?" new-disk="/mnt/testkf8.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346049363.020:4933): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346049363.020:4934): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346049363.020:4935): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346049363.021:4936): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=8317 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346049531.678:4937): user pid=3930 uid=0 auid=0 ses=459 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1346049538.760:4938): user pid=5800 uid=0 auid=0 ses=490 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1346049538.761:4939): user pid=5800 uid=0 auid=0 ses=490 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1346049538.761:4940): user pid=5800 uid=0 auid=0 ses=490 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1346049538.761:4941): user pid=5800 uid=0 auid=0 ses=490 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.5.92 addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346049538.761:4942): user pid=5800 uid=0 auid=0 ses=490 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=5800 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346049538.761:4943): user pid=5800 uid=0 auid=0 ses=490 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=5800 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346049538.761:4944): user pid=5800 uid=0 auid=0 ses=490 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5800 suid=0 rport=54528 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1346049538.899:4945): table=nat family=2 entries=7 >type=SYSCALL msg=audit(1346049538.899:4945): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=c5f800 items=0 ppid=8437 pid=8450 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=519 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1346049538.902:4946): table=nat family=2 entries=6 >type=SYSCALL msg=audit(1346049538.902:4946): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1d46800 items=0 ppid=8437 pid=8451 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=519 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1346049538.905:4947): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1346049538.905:4947): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=18bd5e0 items=0 ppid=8437 pid=8452 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=519 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1346049538.923:4948): table=mangle family=2 entries=7 >type=SYSCALL msg=audit(1346049538.923:4948): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=17c9290 items=0 ppid=8437 pid=8460 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=519 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1346049538.931:4949): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1346049538.931:4949): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=238a7f0 items=0 ppid=8437 pid=8463 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=519 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1346049538.933:4950): table=filter family=2 entries=5 >type=SYSCALL msg=audit(1346049538.933:4950): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=191b7f0 items=0 ppid=8437 pid=8464 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=519 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1346049538.936:4951): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1346049538.936:4951): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=b25290 items=0 ppid=8437 pid=8465 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=519 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1346049538.939:4952): table=filter family=2 entries=6 >type=SYSCALL msg=audit(1346049538.939:4952): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=ed1e50 items=0 ppid=8437 pid=8466 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=519 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1346049538.941:4953): table=filter family=2 entries=7 >type=SYSCALL msg=audit(1346049538.941:4953): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=2227fc0 items=0 ppid=8437 pid=8467 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=519 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1346049538.944:4954): table=filter family=2 entries=8 >type=SYSCALL msg=audit(1346049538.944:4954): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=123d920 items=0 ppid=8437 pid=8468 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=519 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1346049538.946:4955): table=filter family=2 entries=9 >type=SYSCALL msg=audit(1346049538.946:4955): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=13f1a90 items=0 ppid=8437 pid=8469 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=519 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1346049538.948:4956): table=filter family=2 entries=10 >type=SYSCALL msg=audit(1346049538.948:4956): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=26b27d0 items=0 ppid=8437 pid=8470 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=519 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1346049538.950:4957): table=filter family=2 entries=11 >type=SYSCALL msg=audit(1346049538.950:4957): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=222a940 items=0 ppid=8437 pid=8471 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=519 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1346049538.952:4958): table=filter family=2 entries=12 >type=SYSCALL msg=audit(1346049538.952:4958): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=e2f550 items=0 ppid=8437 pid=8472 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=519 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1346049538.954:4959): table=nat family=2 entries=4 >type=SYSCALL msg=audit(1346049538.954:4959): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1839620 items=0 ppid=8437 pid=8473 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=519 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1346049538.956:4960): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1346049538.956:4960): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=d6e800 items=0 ppid=8437 pid=8474 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=519 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1346049538.958:4961): table=nat family=2 entries=6 >type=SYSCALL msg=audit(1346049538.958:4961): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1e4c700 items=0 ppid=8437 pid=8475 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=519 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1346049539.425:4962): table=filter family=10 entries=0 >type=NETFILTER_CFG msg=audit(1346049539.425:4962): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1346049539.425:4962): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1346049539.425:4962): table=mangle family=2 entries=0 >type=SYSCALL msg=audit(1346049539.425:4962): arch=c000003e syscall=56 success=yes exit=8522 a0=6c020011 a1=7f786818c4e0 a2=8 a3=a7373 items=0 ppid=1 pid=8448 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=519 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=SYSCALL msg=audit(1346049539.425:4963): arch=c000003e syscall=56 success=yes exit=0 a0=6c020011 a1=7f786818c4e0 a2=8 a3=a7373 items=0 ppid=8448 pid=8522 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=519 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=FD_PAIR msg=audit(1346049539.425:4963): fd0=0 fd1=0 >type=NETFILTER_CFG msg=audit(1346049540.607:4964): table=filter family=2 entries=13 >type=SYSCALL msg=audit(1346049540.607:4964): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=264aff0 items=0 ppid=8254 pid=8523 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=519 comm="iptables" exe="/sbin/iptables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=VIRT_MACHINE_ID msg=audit(1346049543.239:4965): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346049543.240:4966): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346049543.240:4967): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=none exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346049543.344:4968): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346049543.345:4969): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346049543.346:4970): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346049543.346:4971): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346049543.346:4972): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346049543.346:4973): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346049543.346:4974): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346049543.346:4975): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346049543.346:4976): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346049543.346:4977): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1346049543.346:4978): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346049543.346:4979): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346049543.366:4980): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="macvtap0" rdev=? exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346049543.366:4981): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1346049543.522:4982): avc: denied { getattr } for pid=8535 comm="qemu-kvm" name="/" dev=0:1b ino=101 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:nfs_t:s0 tclass=filesystem >type=SYSCALL msg=audit(1346049543.522:4982): arch=c000003e syscall=138 success=no exit=-13 a0=9 a1=7fff32f9d070 a2=3 a3=48 items=0 ppid=1 pid=8535 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=519 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1346049543.794:4983): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-disk="?" new-disk="/mnt/testkf8.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346049543.794:4984): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346049543.794:4985): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346049543.794:4986): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346049543.794:4987): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=8535 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1346049601.704:4988): user pid=8611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346049601.704:4989): user pid=8611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346049601.711:4990): pid=8611 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=520 >type=USER_START msg=audit(1346049601.717:4991): user pid=8611 uid=0 auid=0 ses=520 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346049601.793:4992): user pid=8611 uid=0 auid=0 ses=520 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346049601.793:4993): user pid=8611 uid=0 auid=0 ses=520 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=VIRT_CONTROL msg=audit(1346050130.135:4994): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346050142.168:4995): user pid=8709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8709 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346050142.168:4996): user pid=8709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8709 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346050142.169:4997): user pid=8708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=8709 suid=74 rport=55757 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346050142.170:4998): user pid=8708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=8709 suid=74 rport=55757 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346050142.223:4999): user pid=8708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=CRYPTO_KEY_USER msg=audit(1346050142.966:5000): user pid=8708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8709 suid=74 rport=55757 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_ERR msg=audit(1346050142.966:5001): user pid=8708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident acct="?" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=failed' >type=CRYPTO_KEY_USER msg=audit(1346050142.966:5002): user pid=8708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8708 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346050142.966:5003): user pid=8708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8708 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_LOGIN msg=audit(1346050142.966:5004): user pid=8708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=CRYPTO_KEY_USER msg=audit(1346050147.218:5005): user pid=8711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8711 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346050147.218:5006): user pid=8711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8711 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346050147.218:5007): user pid=8710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=8711 suid=74 rport=55759 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346050147.218:5008): user pid=8710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=8711 suid=74 rport=55759 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346050147.271:5009): user pid=8710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1346050148.565:5010): user pid=8710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1346050148.567:5011): user pid=8710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346050148.568:5012): user pid=8710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8711 suid=74 rport=55759 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346050148.569:5013): user pid=8710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1346050148.569:5014): user pid=8710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1346050148.569:5015): pid=8710 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=521 >type=USER_ROLE_CHANGE msg=audit(1346050148.642:5016): user pid=8710 uid=0 auid=0 ses=521 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346050148.646:5017): user pid=8710 uid=0 auid=0 ses=521 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1346050148.648:5018): user pid=8710 uid=0 auid=0 ses=521 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346050148.648:5019): user pid=8710 uid=0 auid=0 ses=521 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346050148.648:5020): user pid=8714 uid=0 auid=0 ses=521 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8714 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346050148.649:5021): user pid=8714 uid=0 auid=0 ses=521 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8714 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRED_REFR msg=audit(1346050148.649:5022): user pid=8714 uid=0 auid=0 ses=521 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=VIRT_MACHINE_ID msg=audit(1346050148.838:5023): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346050148.839:5024): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346050148.839:5025): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=none exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050148.962:5026): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050148.965:5027): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050148.965:5028): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050148.965:5029): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050148.965:5030): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050148.965:5031): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050148.965:5032): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050148.966:5033): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050148.966:5034): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050148.966:5035): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1346050148.966:5036): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050148.966:5037): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050148.993:5038): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="macvtap0" rdev=? exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050148.993:5039): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1346050149.045:5040): avc: denied { read write } for pid=8734 comm="qemu-kvm" path="/dev/tap47" dev=devtmpfs ino=120800 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1346050149.045:5040): arch=c000003e syscall=59 success=yes exit=0 a0=7f78680071c0 a1=7f7868185100 a2=7f78680084b0 a3=18 items=0 ppid=1 pid=8734 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=519 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1346050149.138:5041): avc: denied { getattr } for pid=8734 comm="qemu-kvm" name="/" dev=0:1b ino=101 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:nfs_t:s0 tclass=filesystem >type=SYSCALL msg=audit(1346050149.138:5041): arch=c000003e syscall=138 success=no exit=-13 a0=9 a1=7fffb2439cf0 a2=3 a3=48 items=0 ppid=1 pid=8734 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=519 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1346050149.395:5042): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-disk="?" new-disk="/mnt/testkf8.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050149.396:5043): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050149.396:5044): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050149.396:5045): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346050149.396:5046): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=migrated vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=8734 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346050154.958:5047): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=failed vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1346050155.138:5048): user pid=8710 uid=0 auid=0 ses=521 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1346050155.138:5049): user pid=8710 uid=0 auid=0 ses=521 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1346050155.139:5050): user pid=8710 uid=0 auid=0 ses=521 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1346050155.139:5051): user pid=8710 uid=0 auid=0 ses=521 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346050155.139:5052): user pid=8710 uid=0 auid=0 ses=521 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8710 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346050155.139:5053): user pid=8710 uid=0 auid=0 ses=521 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8710 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346050155.139:5054): user pid=8710 uid=0 auid=0 ses=521 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8710 suid=0 rport=55759 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346050173.526:5055): user pid=8776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8776 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346050173.526:5056): user pid=8776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8776 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346050173.526:5057): user pid=8775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=8776 suid=74 rport=55767 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346050173.526:5058): user pid=8775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=8776 suid=74 rport=55767 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346050173.584:5059): user pid=8775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1346050174.892:5060): user pid=8775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1346050174.895:5061): user pid=8775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346050174.895:5062): user pid=8775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8776 suid=74 rport=55767 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346050174.896:5063): user pid=8775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1346050174.896:5064): user pid=8775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1346050174.896:5065): pid=8775 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=522 >type=USER_ROLE_CHANGE msg=audit(1346050174.966:5066): user pid=8775 uid=0 auid=0 ses=522 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346050174.969:5067): user pid=8775 uid=0 auid=0 ses=522 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1346050174.970:5068): user pid=8775 uid=0 auid=0 ses=522 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346050174.970:5069): user pid=8775 uid=0 auid=0 ses=522 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346050174.971:5070): user pid=8779 uid=0 auid=0 ses=522 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8779 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346050174.971:5071): user pid=8779 uid=0 auid=0 ses=522 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8779 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRED_REFR msg=audit(1346050174.971:5072): user pid=8779 uid=0 auid=0 ses=522 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=VIRT_MACHINE_ID msg=audit(1346050175.133:5073): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346050175.133:5074): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346050175.133:5075): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=none exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050175.250:5076): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050175.252:5077): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050175.252:5078): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050175.252:5079): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050175.252:5080): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050175.252:5081): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050175.252:5082): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050175.253:5083): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050175.253:5084): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050175.253:5085): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1346050175.253:5086): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050175.253:5087): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050175.276:5088): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="macvtap0" rdev=? exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050175.276:5089): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1346050175.348:5090): avc: denied { read write } for pid=8799 comm="qemu-kvm" path="/dev/tap48" dev=devtmpfs ino=121177 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1346050175.348:5090): arch=c000003e syscall=59 success=yes exit=0 a0=7f7858005180 a1=7f7858005940 a2=7f78580047d0 a3=18 items=0 ppid=1 pid=8799 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=519 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1346050175.440:5091): avc: denied { getattr } for pid=8799 comm="qemu-kvm" name="/" dev=0:1b ino=101 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:nfs_t:s0 tclass=filesystem >type=SYSCALL msg=audit(1346050175.440:5091): arch=c000003e syscall=138 success=no exit=-13 a0=9 a1=7fff4647f1a0 a2=3 a3=48 items=0 ppid=1 pid=8799 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=519 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1346050175.706:5092): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-disk="?" new-disk="/mnt/testkf8.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050175.706:5093): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050175.706:5094): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050175.706:5095): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346050175.706:5096): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=migrated vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=8799 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346050181.527:5097): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=failed vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1346050181.666:5098): user pid=8775 uid=0 auid=0 ses=522 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1346050181.666:5099): user pid=8775 uid=0 auid=0 ses=522 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1346050181.666:5100): user pid=8775 uid=0 auid=0 ses=522 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1346050181.666:5101): user pid=8775 uid=0 auid=0 ses=522 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346050181.666:5102): user pid=8775 uid=0 auid=0 ses=522 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8775 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346050181.666:5103): user pid=8775 uid=0 auid=0 ses=522 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8775 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346050181.666:5104): user pid=8775 uid=0 auid=0 ses=522 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8775 suid=0 rport=55767 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_ACCT msg=audit(1346050201.819:5105): user pid=8845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346050201.819:5106): user pid=8845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346050201.826:5107): pid=8845 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=523 >type=USER_START msg=audit(1346050201.834:5108): user pid=8845 uid=0 auid=0 ses=523 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346050201.924:5109): user pid=8845 uid=0 auid=0 ses=523 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346050201.925:5110): user pid=8845 uid=0 auid=0 ses=523 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRYPTO_KEY_USER msg=audit(1346050240.925:5111): user pid=8851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8851 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346050240.925:5112): user pid=8851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8851 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346050240.927:5113): user pid=8850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=8851 suid=74 rport=55780 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346050240.927:5114): user pid=8850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=8851 suid=74 rport=55780 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346050241.171:5115): user pid=8850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1346050242.484:5116): user pid=8850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1346050242.487:5117): user pid=8850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346050242.487:5118): user pid=8850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8851 suid=74 rport=55780 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346050242.488:5119): user pid=8850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1346050242.488:5120): user pid=8850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1346050242.488:5121): pid=8850 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=524 >type=USER_ROLE_CHANGE msg=audit(1346050242.560:5122): user pid=8850 uid=0 auid=0 ses=524 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346050242.562:5123): user pid=8850 uid=0 auid=0 ses=524 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1346050242.564:5124): user pid=8850 uid=0 auid=0 ses=524 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346050242.565:5125): user pid=8850 uid=0 auid=0 ses=524 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346050242.566:5126): user pid=8854 uid=0 auid=0 ses=524 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8854 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346050242.566:5127): user pid=8854 uid=0 auid=0 ses=524 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8854 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRED_REFR msg=audit(1346050242.566:5128): user pid=8854 uid=0 auid=0 ses=524 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=VIRT_MACHINE_ID msg=audit(1346050242.738:5129): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346050242.738:5130): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346050242.738:5131): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=none exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050242.860:5132): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050242.862:5133): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050242.862:5134): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050242.862:5135): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050242.862:5136): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050242.862:5137): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050242.862:5138): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050242.863:5139): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050242.863:5140): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050242.863:5141): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1346050242.863:5142): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050242.863:5143): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050242.894:5144): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="macvtap0" rdev=? exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050242.895:5145): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1346050242.950:5146): avc: denied { read write } for pid=8874 comm="qemu-kvm" path="/dev/tap49" dev=devtmpfs ino=121611 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1346050242.950:5146): arch=c000003e syscall=59 success=yes exit=0 a0=7f785c005510 a1=7f785c005d20 a2=7f785c004b60 a3=18 items=0 ppid=1 pid=8874 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=519 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1346050243.046:5147): avc: denied { getattr } for pid=8874 comm="qemu-kvm" name="/" dev=0:1b ino=101 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:nfs_t:s0 tclass=filesystem >type=SYSCALL msg=audit(1346050243.046:5147): arch=c000003e syscall=138 success=no exit=-13 a0=9 a1=7fff29e3b100 a2=3 a3=48 items=0 ppid=1 pid=8874 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=519 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1346050243.317:5148): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-disk="?" new-disk="/mnt/testkf8.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050243.317:5149): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050243.317:5150): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050243.317:5151): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346050243.317:5152): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=migrated vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=8874 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346050248.756:5153): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=failed vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1346050248.909:5154): user pid=8850 uid=0 auid=0 ses=524 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1346050248.909:5155): user pid=8850 uid=0 auid=0 ses=524 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1346050248.910:5156): user pid=8850 uid=0 auid=0 ses=524 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1346050248.910:5157): user pid=8850 uid=0 auid=0 ses=524 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346050248.910:5158): user pid=8850 uid=0 auid=0 ses=524 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8850 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346050248.910:5159): user pid=8850 uid=0 auid=0 ses=524 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8850 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346050248.910:5160): user pid=8850 uid=0 auid=0 ses=524 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8850 suid=0 rport=55780 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346050346.195:5161): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346050346.195:5162): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346050346.195:5163): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=none exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050346.313:5164): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050346.314:5165): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050346.314:5166): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050346.314:5167): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050346.314:5168): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050346.315:5169): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050346.315:5170): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050346.315:5171): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050346.315:5172): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050346.315:5173): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1346050346.315:5174): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050346.315:5175): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050346.338:5176): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="macvtap0" rdev=? exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050346.338:5177): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1346050346.386:5178): avc: denied { read write } for pid=8938 comm="qemu-kvm" path="/dev/tap50" dev=devtmpfs ino=121933 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1346050346.386:5178): arch=c000003e syscall=59 success=yes exit=0 a0=7f785800ce70 a1=7f785800d070 a2=7f785800b580 a3=18 items=0 ppid=1 pid=8938 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=519 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1346050346.475:5179): avc: denied { getattr } for pid=8938 comm="qemu-kvm" name="/" dev=0:1b ino=101 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:nfs_t:s0 tclass=filesystem >type=SYSCALL msg=audit(1346050346.475:5179): arch=c000003e syscall=138 success=no exit=-13 a0=9 a1=7fff784f6460 a2=3 a3=48 items=0 ppid=1 pid=8938 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=519 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1346050346.735:5180): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-disk="?" new-disk="/mnt/testkf8.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050346.735:5181): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050346.735:5182): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050346.735:5183): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346050346.736:5184): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=8938 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=MAC_STATUS msg=audit(1346050793.999:5185): enforcing=0 old_enforcing=1 auid=0 ses=519 >type=SYSCALL msg=audit(1346050793.999:5185): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffb09ecdf0 a2=1 a3=fffffff8 items=0 ppid=8254 pid=9046 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=519 comm="setenforce" exe="/usr/sbin/setenforce" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=USER_ACCT msg=audit(1346050801.962:5186): user pid=9051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346050801.962:5187): user pid=9051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346050801.964:5188): pid=9051 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=525 >type=USER_START msg=audit(1346050801.974:5189): user pid=9051 uid=0 auid=0 ses=525 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346050802.025:5190): user pid=9051 uid=0 auid=0 ses=525 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346050802.026:5191): user pid=9051 uid=0 auid=0 ses=525 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1346050803.599:5192): avc: denied { getattr } for pid=8938 comm="qemu-kvm" path="socket:[122314]" dev=sockfs ino=122314 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 tclass=tcp_socket >type=SYSCALL msg=audit(1346050803.599:5192): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7fff784f8470 a2=7fff784f8470 a3=0 items=0 ppid=1 pid=8938 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=519 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=VIRT_CONTROL msg=audit(1346050804.253:5193): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=migrated vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=MAC_STATUS msg=audit(1346050852.605:5194): enforcing=1 old_enforcing=0 auid=0 ses=491 >type=SYSCALL msg=audit(1346050852.605:5194): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff1bc058f0 a2=1 a3=fffffff8 items=0 ppid=5855 pid=9074 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=491 comm="setenforce" exe="/usr/sbin/setenforce" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=USER_ACCT msg=audit(1346050861.056:5195): user pid=9075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346050861.056:5196): user pid=9075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346050861.058:5197): pid=9075 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=526 >type=USER_START msg=audit(1346050861.071:5198): user pid=9075 uid=0 auid=0 ses=526 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346050861.105:5199): user pid=9075 uid=0 auid=0 ses=526 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346050861.105:5200): user pid=9075 uid=0 auid=0 ses=526 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRYPTO_KEY_USER msg=audit(1346050861.895:5201): user pid=9088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=9088 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346050861.896:5202): user pid=9088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=9088 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346050861.897:5203): user pid=9087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=9088 suid=74 rport=55853 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346050861.897:5204): user pid=9087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=9088 suid=74 rport=55853 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346050862.149:5205): user pid=9087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1346050864.497:5206): user pid=9087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1346050864.500:5207): user pid=9087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346050864.500:5208): user pid=9087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9088 suid=74 rport=55853 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346050864.501:5209): user pid=9087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1346050864.501:5210): user pid=9087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1346050864.502:5211): pid=9087 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=527 >type=USER_ROLE_CHANGE msg=audit(1346050864.574:5212): user pid=9087 uid=0 auid=0 ses=527 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346050864.576:5213): user pid=9087 uid=0 auid=0 ses=527 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1346050864.578:5214): user pid=9087 uid=0 auid=0 ses=527 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346050864.578:5215): user pid=9087 uid=0 auid=0 ses=527 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346050864.579:5216): user pid=9091 uid=0 auid=0 ses=527 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=9091 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346050864.579:5217): user pid=9091 uid=0 auid=0 ses=527 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=9091 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRED_REFR msg=audit(1346050864.580:5218): user pid=9091 uid=0 auid=0 ses=527 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=VIRT_MACHINE_ID msg=audit(1346050864.762:5219): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346050864.762:5220): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346050864.762:5221): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=none exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050864.879:5222): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050864.883:5223): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050864.883:5224): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050864.883:5225): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050864.883:5226): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050864.883:5227): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050864.883:5228): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050864.883:5229): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050864.884:5230): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050864.884:5231): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1346050864.884:5232): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050864.884:5233): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050864.916:5234): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="macvtap0" rdev=? exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050864.916:5235): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1346050864.972:5236): avc: denied { read write } for pid=9111 comm="qemu-kvm" path="/dev/tap51" dev=devtmpfs ino=122686 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1346050864.972:5236): arch=c000003e syscall=59 success=yes exit=0 a0=7f78640056c0 a1=7f7864005d60 a2=7f7864004fa0 a3=18 items=0 ppid=1 pid=9111 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=519 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1346050865.073:5237): avc: denied { getattr } for pid=9111 comm="qemu-kvm" name="/" dev=0:1b ino=101 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:nfs_t:s0 tclass=filesystem >type=SYSCALL msg=audit(1346050865.073:5237): arch=c000003e syscall=138 success=no exit=-13 a0=9 a1=7fff10f53930 a2=3 a3=48 items=0 ppid=1 pid=9111 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=519 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1346050865.327:5238): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-disk="?" new-disk="/mnt/testkf8.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050865.327:5239): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050865.327:5240): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050865.327:5241): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346050865.327:5242): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=migrated vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=9111 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346050870.643:5243): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=failed vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1346050870.799:5244): user pid=9087 uid=0 auid=0 ses=527 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1346050870.800:5245): user pid=9087 uid=0 auid=0 ses=527 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1346050870.800:5246): user pid=9087 uid=0 auid=0 ses=527 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1346050870.800:5247): user pid=9087 uid=0 auid=0 ses=527 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346050870.800:5248): user pid=9087 uid=0 auid=0 ses=527 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=9087 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346050870.800:5249): user pid=9087 uid=0 auid=0 ses=527 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=9087 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346050870.800:5250): user pid=9087 uid=0 auid=0 ses=527 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9087 suid=0 rport=55853 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_END msg=audit(1346050877.438:5251): user pid=8250 uid=0 auid=0 ses=519 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=USER_LOGOUT msg=audit(1346050877.438:5252): user pid=8250 uid=0 auid=0 ses=519 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=USER_END msg=audit(1346050877.441:5253): user pid=8250 uid=0 auid=0 ses=519 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.4.196 addr=10.66.4.196 terminal=ssh res=success' >type=CRED_DISP msg=audit(1346050877.441:5254): user pid=8250 uid=0 auid=0 ses=519 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.4.196 addr=10.66.4.196 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346050877.441:5255): user pid=8250 uid=0 auid=0 ses=519 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=8250 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.4.196 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346050877.441:5256): user pid=8250 uid=0 auid=0 ses=519 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=8250 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.4.196 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346050877.441:5257): user pid=8250 uid=0 auid=0 ses=519 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8250 suid=0 rport=34988 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.4.196 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346050990.911:5258): user pid=9165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=9165 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346050990.911:5259): user pid=9165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=9165 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346050990.911:5260): user pid=9164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=9165 suid=74 rport=55863 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346050990.912:5261): user pid=9164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=9165 suid=74 rport=55863 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346050991.525:5262): user pid=9164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1346050997.509:5263): user pid=9164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1346050997.512:5264): user pid=9164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346050997.513:5265): user pid=9164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9165 suid=74 rport=55863 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346050997.513:5266): user pid=9164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1346050997.513:5267): user pid=9164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1346050997.514:5268): pid=9164 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=528 >type=USER_ROLE_CHANGE msg=audit(1346050997.586:5269): user pid=9164 uid=0 auid=0 ses=528 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346050997.589:5270): user pid=9164 uid=0 auid=0 ses=528 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1346050997.590:5271): user pid=9164 uid=0 auid=0 ses=528 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346050997.590:5272): user pid=9164 uid=0 auid=0 ses=528 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346050997.591:5273): user pid=9168 uid=0 auid=0 ses=528 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=9168 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346050997.591:5274): user pid=9168 uid=0 auid=0 ses=528 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=9168 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRED_REFR msg=audit(1346050997.591:5275): user pid=9168 uid=0 auid=0 ses=528 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=VIRT_MACHINE_ID msg=audit(1346050997.763:5276): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346050997.763:5277): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346050997.763:5278): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=none exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050997.876:5279): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050997.878:5280): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050997.878:5281): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050997.878:5282): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050997.878:5283): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050997.879:5284): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050997.879:5285): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050997.879:5286): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050997.879:5287): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050997.879:5288): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1346050997.879:5289): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050997.880:5290): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050997.907:5291): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="macvtap0" rdev=? exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050997.908:5292): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1346050997.959:5293): avc: denied { read write } for pid=9188 comm="qemu-kvm" path="/dev/tap52" dev=devtmpfs ino=123104 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1346050997.959:5293): arch=c000003e syscall=59 success=yes exit=0 a0=7f785c004f30 a1=7f785c0056f0 a2=7f785c004580 a3=18 items=0 ppid=1 pid=9188 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=519 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1346050998.048:5294): avc: denied { getattr } for pid=9188 comm="qemu-kvm" name="/" dev=0:1b ino=101 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:nfs_t:s0 tclass=filesystem >type=SYSCALL msg=audit(1346050998.048:5294): arch=c000003e syscall=138 success=no exit=-13 a0=9 a1=7fff078ef9d0 a2=3 a3=48 items=0 ppid=1 pid=9188 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=519 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1346050998.312:5295): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-disk="?" new-disk="/mnt/testkf8.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050998.312:5296): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050998.312:5297): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346050998.312:5298): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346050998.312:5299): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=migrated vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=9188 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346051003.991:5300): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=failed vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1346051004.130:5301): user pid=9164 uid=0 auid=0 ses=528 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1346051004.131:5302): user pid=9164 uid=0 auid=0 ses=528 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1346051004.131:5303): user pid=9164 uid=0 auid=0 ses=528 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1346051004.131:5304): user pid=9164 uid=0 auid=0 ses=528 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346051004.131:5305): user pid=9164 uid=0 auid=0 ses=528 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=9164 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346051004.131:5306): user pid=9164 uid=0 auid=0 ses=528 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=9164 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346051004.131:5307): user pid=9164 uid=0 auid=0 ses=528 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9164 suid=0 rport=55863 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346051318.974:5308): user pid=9261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=9261 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346051318.974:5309): user pid=9261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=9261 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346051318.976:5310): user pid=9260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=9261 suid=74 rport=55883 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346051318.976:5311): user pid=9260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=9261 suid=74 rport=55883 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346051319.217:5312): user pid=9260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1346051321.964:5313): user pid=9260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1346051321.967:5314): user pid=9260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346051321.968:5315): user pid=9260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9261 suid=74 rport=55883 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346051321.968:5316): user pid=9260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1346051321.968:5317): user pid=9260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1346051321.969:5318): pid=9260 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=529 >type=USER_ROLE_CHANGE msg=audit(1346051322.037:5319): user pid=9260 uid=0 auid=0 ses=529 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346051322.040:5320): user pid=9260 uid=0 auid=0 ses=529 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1346051322.041:5321): user pid=9260 uid=0 auid=0 ses=529 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346051322.041:5322): user pid=9260 uid=0 auid=0 ses=529 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346051322.041:5323): user pid=9264 uid=0 auid=0 ses=529 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=9264 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346051322.042:5324): user pid=9264 uid=0 auid=0 ses=529 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=9264 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRED_REFR msg=audit(1346051322.042:5325): user pid=9264 uid=0 auid=0 ses=529 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=VIRT_MACHINE_ID msg=audit(1346051322.206:5326): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346051322.206:5327): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346051322.206:5328): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=none exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346051322.337:5329): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346051322.342:5330): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346051322.342:5331): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346051322.342:5332): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346051322.343:5333): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346051322.343:5334): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346051322.343:5335): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346051322.343:5336): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346051322.343:5337): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346051322.343:5338): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1346051322.343:5339): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346051322.344:5340): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346051322.365:5341): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="macvtap0" rdev=? exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346051322.365:5342): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1346051322.424:5343): avc: denied { read write } for pid=9284 comm="qemu-kvm" path="/dev/tap53" dev=devtmpfs ino=123570 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1346051322.424:5343): arch=c000003e syscall=59 success=yes exit=0 a0=7f785800d310 a1=7f785800db40 a2=7f785800c960 a3=18 items=0 ppid=1 pid=9284 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=519 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1346051322.518:5344): avc: denied { getattr } for pid=9284 comm="qemu-kvm" name="/" dev=0:1b ino=101 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:nfs_t:s0 tclass=filesystem >type=SYSCALL msg=audit(1346051322.518:5344): arch=c000003e syscall=138 success=no exit=-13 a0=9 a1=7fffd50dd510 a2=3 a3=48 items=0 ppid=1 pid=9284 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=519 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1346051322.773:5345): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-disk="?" new-disk="/mnt/testkf8.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346051322.773:5346): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346051322.773:5347): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346051322.773:5348): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346051322.773:5349): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=migrated vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=9284 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346051328.069:5350): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=failed vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1346051328.215:5351): user pid=9260 uid=0 auid=0 ses=529 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1346051328.215:5352): user pid=9260 uid=0 auid=0 ses=529 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1346051328.216:5353): user pid=9260 uid=0 auid=0 ses=529 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1346051328.216:5354): user pid=9260 uid=0 auid=0 ses=529 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346051328.216:5355): user pid=9260 uid=0 auid=0 ses=529 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=9260 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346051328.216:5356): user pid=9260 uid=0 auid=0 ses=529 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=9260 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346051328.216:5357): user pid=9260 uid=0 auid=0 ses=529 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9260 suid=0 rport=55883 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_ACCT msg=audit(1346051401.137:5358): user pid=9338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346051401.137:5359): user pid=9338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346051401.144:5360): pid=9338 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=530 >type=USER_START msg=audit(1346051401.150:5361): user pid=9338 uid=0 auid=0 ses=530 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346051401.234:5362): user pid=9338 uid=0 auid=0 ses=530 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346051401.234:5363): user pid=9338 uid=0 auid=0 ses=530 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRYPTO_KEY_USER msg=audit(1346051409.299:5364): user pid=9342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=9342 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346051409.299:5365): user pid=9342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=9342 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346051409.299:5366): user pid=9341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=9342 suid=74 rport=55891 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346051409.300:5367): user pid=9341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=9342 suid=74 rport=55891 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346051409.545:5368): user pid=9341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1346051411.871:5369): user pid=9341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1346051411.874:5370): user pid=9341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346051411.875:5371): user pid=9341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9342 suid=74 rport=55891 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346051411.876:5372): user pid=9341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1346051411.876:5373): user pid=9341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1346051411.876:5374): pid=9341 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=531 >type=USER_ROLE_CHANGE msg=audit(1346051411.948:5375): user pid=9341 uid=0 auid=0 ses=531 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346051411.951:5376): user pid=9341 uid=0 auid=0 ses=531 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1346051411.953:5377): user pid=9341 uid=0 auid=0 ses=531 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346051411.953:5378): user pid=9341 uid=0 auid=0 ses=531 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346051411.954:5379): user pid=9345 uid=0 auid=0 ses=531 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=9345 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346051411.954:5380): user pid=9345 uid=0 auid=0 ses=531 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=9345 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRED_REFR msg=audit(1346051411.955:5381): user pid=9345 uid=0 auid=0 ses=531 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=VIRT_MACHINE_ID msg=audit(1346051412.131:5382): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346051412.131:5383): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346051412.131:5384): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=none exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346051412.253:5385): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346051412.255:5386): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346051412.256:5387): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346051412.256:5388): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346051412.256:5389): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346051412.256:5390): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346051412.256:5391): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346051412.256:5392): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346051412.256:5393): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346051412.256:5394): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1346051412.257:5395): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346051412.257:5396): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346051412.282:5397): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="macvtap0" rdev=? exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346051412.282:5398): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1346051412.352:5399): avc: denied { read write } for pid=9365 comm="qemu-kvm" path="/dev/tap54" dev=devtmpfs ino=124022 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1346051412.352:5399): arch=c000003e syscall=59 success=yes exit=0 a0=7f7868185230 a1=7f78680067f0 a2=7f78680efef0 a3=18 items=0 ppid=1 pid=9365 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=519 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1346051412.443:5400): avc: denied { getattr } for pid=9365 comm="qemu-kvm" name="/" dev=0:1b ino=101 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:nfs_t:s0 tclass=filesystem >type=SYSCALL msg=audit(1346051412.443:5400): arch=c000003e syscall=138 success=no exit=-13 a0=9 a1=7fffd39ae980 a2=3 a3=48 items=0 ppid=1 pid=9365 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=519 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1346051412.719:5401): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-disk="?" new-disk="/mnt/testkf8.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346051412.719:5402): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346051412.719:5403): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346051412.720:5404): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346051412.720:5405): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=migrated vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=9365 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346051418.031:5406): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=failed vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1346051418.170:5407): user pid=9341 uid=0 auid=0 ses=531 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1346051418.171:5408): user pid=9341 uid=0 auid=0 ses=531 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1346051418.171:5409): user pid=9341 uid=0 auid=0 ses=531 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1346051418.171:5410): user pid=9341 uid=0 auid=0 ses=531 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346051418.171:5411): user pid=9341 uid=0 auid=0 ses=531 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=9341 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346051418.171:5412): user pid=9341 uid=0 auid=0 ses=531 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=9341 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346051418.171:5413): user pid=9341 uid=0 auid=0 ses=531 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9341 suid=0 rport=55891 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346051936.486:5414): user pid=9463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=9463 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.4.196 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346051936.486:5415): user pid=9463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=9463 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.4.196 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346051936.486:5416): user pid=9462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=9463 suid=74 rport=35006 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.4.196 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346051936.486:5417): user pid=9462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=9463 suid=74 rport=35006 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.4.196 terminal=? res=success' >type=USER_AUTH msg=audit(1346051936.813:5418): user pid=9462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.4.196 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1346051937.869:5419): user pid=9462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.66.4.196 addr=10.66.4.196 terminal=ssh res=success' >type=USER_ACCT msg=audit(1346051937.872:5420): user pid=9462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.66.4.196 addr=10.66.4.196 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346051937.873:5421): user pid=9462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9463 suid=74 rport=35006 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.4.196 terminal=? res=success' >type=USER_AUTH msg=audit(1346051937.874:5422): user pid=9462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.4.196 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1346051937.874:5423): user pid=9462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.4.196 addr=10.66.4.196 terminal=ssh res=success' >type=LOGIN msg=audit(1346051937.874:5424): pid=9462 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=532 >type=USER_ROLE_CHANGE msg=audit(1346051937.940:5425): user pid=9462 uid=0 auid=0 ses=532 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.66.4.196 addr=10.66.4.196 terminal=ssh res=success' >type=USER_START msg=audit(1346051937.944:5426): user pid=9462 uid=0 auid=0 ses=532 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.66.4.196 addr=10.66.4.196 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1346051937.949:5427): user pid=9466 uid=0 auid=0 ses=532 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.4.196 addr=10.66.4.196 terminal=/dev/pts/1 res=success' >type=USER_START msg=audit(1346051937.949:5428): user pid=9466 uid=0 auid=0 ses=532 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.66.4.196 addr=10.66.4.196 terminal=/dev/pts/1 res=success' >type=CRYPTO_KEY_USER msg=audit(1346051937.949:5429): user pid=9466 uid=0 auid=0 ses=532 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=9466 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.4.196 terminal=pts/1 res=success' >type=CRYPTO_KEY_USER msg=audit(1346051937.949:5430): user pid=9466 uid=0 auid=0 ses=532 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=9466 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.4.196 terminal=pts/1 res=success' >type=CRED_REFR msg=audit(1346051937.950:5431): user pid=9466 uid=0 auid=0 ses=532 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.4.196 addr=10.66.4.196 terminal=ssh res=success' >type=USER_END msg=audit(1346051956.689:5432): user pid=9462 uid=0 auid=0 ses=532 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=USER_LOGOUT msg=audit(1346051956.689:5433): user pid=9462 uid=0 auid=0 ses=532 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=USER_END msg=audit(1346051956.691:5434): user pid=9462 uid=0 auid=0 ses=532 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.66.4.196 addr=10.66.4.196 terminal=ssh res=success' >type=CRED_DISP msg=audit(1346051956.691:5435): user pid=9462 uid=0 auid=0 ses=532 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.66.4.196 addr=10.66.4.196 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346051956.691:5436): user pid=9462 uid=0 auid=0 ses=532 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=9462 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.4.196 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346051956.691:5437): user pid=9462 uid=0 auid=0 ses=532 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=9462 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.4.196 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346051956.691:5438): user pid=9462 uid=0 auid=0 ses=532 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9462 suid=0 rport=35006 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.4.196 terminal=? res=success' >type=USER_ACCT msg=audit(1346052001.263:5439): user pid=9493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346052001.263:5440): user pid=9493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346052001.270:5441): pid=9493 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=533 >type=USER_START msg=audit(1346052001.276:5442): user pid=9493 uid=0 auid=0 ses=533 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346052001.324:5443): user pid=9493 uid=0 auid=0 ses=533 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346052001.324:5444): user pid=9493 uid=0 auid=0 ses=533 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=MAC_STATUS msg=audit(1346052179.749:5445): enforcing=0 old_enforcing=1 auid=0 ses=491 >type=SYSCALL msg=audit(1346052179.749:5445): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff62e576a0 a2=1 a3=fffffff8 items=0 ppid=5855 pid=9516 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=491 comm="setenforce" exe="/usr/sbin/setenforce" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=USER_ACCT msg=audit(1346052601.335:5446): user pid=9561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346052601.335:5447): user pid=9561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346052601.337:5448): pid=9561 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=534 >type=USER_START msg=audit(1346052601.343:5449): user pid=9561 uid=0 auid=0 ses=534 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346052601.419:5450): user pid=9561 uid=0 auid=0 ses=534 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346052601.419:5451): user pid=9561 uid=0 auid=0 ses=534 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRYPTO_KEY_USER msg=audit(1346052927.713:5452): user pid=9595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=9595 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346052927.713:5453): user pid=9595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=9595 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346052927.714:5454): user pid=9594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=9595 suid=74 rport=56031 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346052927.714:5455): user pid=9594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=9595 suid=74 rport=56031 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346052927.964:5456): user pid=9594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1346052929.857:5457): user pid=9594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1346052929.860:5458): user pid=9594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346052929.860:5459): user pid=9594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9595 suid=74 rport=56031 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346052929.861:5460): user pid=9594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1346052929.861:5461): user pid=9594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1346052929.861:5462): pid=9594 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=535 >type=USER_ROLE_CHANGE msg=audit(1346052929.930:5463): user pid=9594 uid=0 auid=0 ses=535 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346052929.933:5464): user pid=9594 uid=0 auid=0 ses=535 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1346052929.935:5465): user pid=9594 uid=0 auid=0 ses=535 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346052929.935:5466): user pid=9594 uid=0 auid=0 ses=535 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346052929.936:5467): user pid=9598 uid=0 auid=0 ses=535 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=9598 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346052929.936:5468): user pid=9598 uid=0 auid=0 ses=535 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=9598 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRED_REFR msg=audit(1346052929.937:5469): user pid=9598 uid=0 auid=0 ses=535 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=VIRT_MACHINE_ID msg=audit(1346052930.099:5470): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346052930.099:5471): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346052930.099:5472): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=none exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346052930.219:5473): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346052930.225:5474): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346052930.226:5475): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346052930.226:5476): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346052930.226:5477): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346052930.226:5478): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346052930.226:5479): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346052930.226:5480): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346052930.227:5481): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346052930.227:5482): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1346052930.227:5483): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346052930.227:5484): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346052930.251:5485): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="macvtap0" rdev=? exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346052930.251:5486): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1346052930.312:5487): avc: denied { read write } for pid=9618 comm="qemu-kvm" path="/dev/tap55" dev=devtmpfs ino=125032 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1346052930.312:5487): arch=c000003e syscall=59 success=yes exit=0 a0=7f7868187940 a1=7f78680f0f50 a2=7f78680f25c0 a3=18 items=0 ppid=1 pid=9618 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=519 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1346052930.400:5488): avc: denied { getattr } for pid=9618 comm="qemu-kvm" name="/" dev=0:1b ino=101 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:nfs_t:s0 tclass=filesystem >type=SYSCALL msg=audit(1346052930.400:5488): arch=c000003e syscall=138 success=yes exit=0 a0=9 a1=7fff34bf93b0 a2=3 a3=48 items=0 ppid=1 pid=9618 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=519 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1346052930.652:5489): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-disk="?" new-disk="/mnt/testkf8.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346052930.652:5490): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346052930.652:5491): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346052930.652:5492): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346052930.652:5493): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=migrated vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=9618 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1346052936.231:5494): user pid=9594 uid=0 auid=0 ses=535 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1346052936.232:5495): user pid=9594 uid=0 auid=0 ses=535 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1346052936.232:5496): user pid=9594 uid=0 auid=0 ses=535 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1346052936.232:5497): user pid=9594 uid=0 auid=0 ses=535 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346052936.232:5498): user pid=9594 uid=0 auid=0 ses=535 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=9594 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346052936.232:5499): user pid=9594 uid=0 auid=0 ses=535 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=9594 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346052936.232:5500): user pid=9594 uid=0 auid=0 ses=535 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9594 suid=0 rport=56031 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=MAC_STATUS msg=audit(1346052951.540:5501): enforcing=1 old_enforcing=0 auid=0 ses=491 >type=SYSCALL msg=audit(1346052951.540:5501): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffb78e7ad0 a2=1 a3=fffffff8 items=0 ppid=5855 pid=9652 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=491 comm="setenforce" exe="/usr/sbin/setenforce" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=VIRT_CONTROL msg=audit(1346052958.646:5502): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346052973.407:5503): user pid=9671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=9671 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346052973.408:5504): user pid=9671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=9671 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346052973.409:5505): user pid=9670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=9671 suid=74 rport=56039 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1346052973.409:5506): user pid=9670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=9671 suid=74 rport=56039 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346052973.463:5507): user pid=9670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1346052975.364:5508): user pid=9670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_ACCT msg=audit(1346052975.367:5509): user pid=9670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346052975.367:5510): user pid=9670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9671 suid=74 rport=56039 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_AUTH msg=audit(1346052975.368:5511): user pid=9670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1346052975.368:5512): user pid=9670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=LOGIN msg=audit(1346052975.368:5513): pid=9670 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=536 >type=USER_ROLE_CHANGE msg=audit(1346052975.440:5514): user pid=9670 uid=0 auid=0 ses=536 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346052975.442:5515): user pid=9670 uid=0 auid=0 ses=536 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1346052975.444:5516): user pid=9670 uid=0 auid=0 ses=536 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_START msg=audit(1346052975.444:5517): user pid=9670 uid=0 auid=0 ses=536 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346052975.445:5518): user pid=9674 uid=0 auid=0 ses=536 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=9674 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346052975.445:5519): user pid=9674 uid=0 auid=0 ses=536 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=9674 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRED_REFR msg=audit(1346052975.446:5520): user pid=9674 uid=0 auid=0 ses=536 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=VIRT_MACHINE_ID msg=audit(1346052975.594:5521): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346052975.594:5522): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1346052975.595:5523): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=? img-ctx=? model=none exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346052975.722:5524): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346052975.725:5525): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346052975.725:5526): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346052975.725:5527): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346052975.725:5528): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346052975.725:5529): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346052975.725:5530): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346052975.726:5531): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346052975.726:5532): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346052975.726:5533): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1346052975.726:5534): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346052975.726:5535): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346052975.752:5536): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="macvtap0" rdev=? exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346052975.752:5537): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1346052975.816:5538): avc: denied { read write } for pid=9694 comm="qemu-kvm" path="/dev/tap56" dev=devtmpfs ino=125463 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1346052975.816:5538): arch=c000003e syscall=59 success=yes exit=0 a0=7f785c0051e0 a1=7f785c0059a0 a2=7f785c004830 a3=18 items=0 ppid=1 pid=9694 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=519 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1346052975.912:5539): avc: denied { getattr } for pid=9694 comm="qemu-kvm" name="/" dev=0:1b ino=101 scontext=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 tcontext=system_u:object_r:nfs_t:s0 tclass=filesystem >type=SYSCALL msg=audit(1346052975.912:5539): arch=c000003e syscall=138 success=no exit=-13 a0=9 a1=7fff5b210970 a2=3 a3=48 items=0 ppid=1 pid=9694 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=519 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:qemu_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1346052976.182:5540): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-disk="?" new-disk="/mnt/testkf8.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346052976.182:5541): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346052976.182:5542): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1346052976.182:5543): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346052976.182:5544): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=migrated vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=9694 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1346052981.104:5545): user pid=8437 uid=0 auid=0 ses=519 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=failed vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1346052981.230:5546): user pid=9670 uid=0 auid=0 ses=536 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=CRED_DISP msg=audit(1346052981.230:5547): user pid=9670 uid=0 auid=0 ses=536 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_END msg=audit(1346052981.230:5548): user pid=9670 uid=0 auid=0 ses=536 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1346052981.230:5549): user pid=9670 uid=0 auid=0 ses=536 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1346052981.230:5550): user pid=9670 uid=0 auid=0 ses=536 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=6f:ba:4e:5c:50:6a:71:c1:16:65:f2:30:8e:f2:5e:dc direction=? spid=9670 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346052981.231:5551): user pid=9670 uid=0 auid=0 ses=536 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:27:b8:02:db:a1:e0:a0:e6:99:96:ad:72:86:1f:1f direction=? spid=9670 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1346052981.231:5552): user pid=9670 uid=0 auid=0 ses=536 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9670 suid=0 rport=56039 laddr=10.66.85.232 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success' >type=USER_ACCT msg=audit(1346053201.447:5553): user pid=9761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1346053201.448:5554): user pid=9761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1346053201.454:5555): pid=9761 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=537 >type=USER_START msg=audit(1346053201.460:5556): user pid=9761 uid=0 auid=0 ses=537 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1346053201.533:5557): user pid=9761 uid=0 auid=0 ses=537 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1346053201.533:5558): user pid=9761 uid=0 auid=0 ses=537 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
<b>You cannot view the attachment while viewing its details because your browser does not support IFRAMEs. <a href="attachment.cgi?id=607160">View the attachment on a separate page</a>.</b>
View Attachment As Raw
Actions:
View
Attachments on
bug 851981
: 607160 |
610647
|
610648