Attachment 610647 Details for Bug 851981 – the audit log when migrate from target to source (target enforce 1)

the audit log when migrate from target to source (target enforce 1)

audit.log (text/plain), 62.53 KB, created by zhenfeng wang on 2012-09-07 07:47:21 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: zhenfeng wang

Created: 2012-09-07 07:47:21 UTC

Size: 62.53 KB

patch

obsolete

>
>type=USER_ACCT msg=audit(1347003001.780:76259): user pid=11736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1347003001.780:76260): user pid=11736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1347003001.782:76261): pid=11736 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=60
>type=USER_START msg=audit(1347003001.786:76262): user pid=11736 uid=0 auid=0 ses=60 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1347003001.823:76263): user pid=11736 uid=0 auid=0 ses=60 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1347003001.823:76264): user pid=11736 uid=0 auid=0 ses=60 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRYPTO_KEY_USER msg=audit(1347003039.445:76265): user pid=11746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=9d:97:ab:d2:40:0b:a0:03:20:0a:32:d5:08:de:61:bd direction=? spid=11746 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1347003039.446:76266): user pid=11746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1a:cc:2a:3f:2b:e4:4f:d6:ed:23:78:6c:71:76:51:82 direction=? spid=11746 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1347003039.448:76267): user pid=11745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=11746 suid=74 rport=44087 laddr=10.66.82.125 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1347003039.449:76268): user pid=11745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=11746 suid=74 rport=44087 laddr=10.66.82.125 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success'
>type=USER_AUTH msg=audit(1347003039.506:76269): user pid=11745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed'
>type=USER_AUTH msg=audit(1347003041.266:76270): user pid=11745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success'
>type=USER_ACCT msg=audit(1347003041.270:76271): user pid=11745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1347003041.271:76272): user pid=11745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11746 suid=74 rport=44087 laddr=10.66.82.125 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success'
>type=USER_AUTH msg=audit(1347003041.272:76273): user pid=11745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1347003041.272:76274): user pid=11745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success'
>type=LOGIN msg=audit(1347003041.272:76275): pid=11745 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=61
>type=USER_ROLE_CHANGE msg=audit(1347003041.355:76276): user pid=11745 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success'
>type=USER_START msg=audit(1347003041.360:76277): user pid=11745 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1347003041.363:76278): user pid=11745 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success'
>type=USER_START msg=audit(1347003041.363:76279): user pid=11745 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1347003041.364:76280): user pid=11749 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=9d:97:ab:d2:40:0b:a0:03:20:0a:32:d5:08:de:61:bd direction=? spid=11749 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1347003041.364:76281): user pid=11749 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1a:cc:2a:3f:2b:e4:4f:d6:ed:23:78:6c:71:76:51:82 direction=? spid=11749 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success'
>type=CRED_REFR msg=audit(1347003041.365:76282): user pid=11749 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success'
>type=VIRT_MACHINE_ID msg=audit(1347003041.572:76283): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_MACHINE_ID msg=audit(1347003041.572:76284): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=unconfined_u:system_r:svirt_t:s0:c708,c987 img-ctx=unconfined_u:object_r:svirt_image_t:s0:c708,c987 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003041.722:76285): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003041.730:76286): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003041.730:76287): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003041.730:76288): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003041.731:76289): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003041.731:76290): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003041.731:76291): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003041.731:76292): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003041.731:76293): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003041.731:76294): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed'
>type=VIRT_RESOURCE msg=audit(1347003041.732:76295): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003041.732:76296): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003041.762:76297): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="macvtap0" rdev=? exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003041.762:76298): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=AVC msg=audit(1347003041.844:76299): avc:  denied  { read write } for  pid=11770 comm="qemu-kvm" path="/dev/tap51" dev=devtmpfs ino=53735 scontext=unconfined_u:system_r:svirt_t:s0:c708,c987 tcontext=system_u:object_r:device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1347003041.844:76299): arch=c000003e syscall=59 success=yes exit=0 a0=7f198c005710 a1=7f198c005e80 a2=7f198c004d60 a3=7f199bdfd6a0 items=0 ppid=1 pid=11770 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=23 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:svirt_t:s0:c708,c987 key=(null)
>type=VIRT_RESOURCE msg=audit(1347003042.170:76300): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-disk="?" new-disk="/mnt/testkf8.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003042.170:76301): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003042.170:76302): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003042.170:76303): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_CONTROL msg=audit(1347003042.170:76304): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=migrated vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=11770 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_CONTROL msg=audit(1347003047.910:76305): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=failed vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1347003048.054:76306): user pid=11745 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1347003048.054:76307): user pid=11745 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success'
>type=USER_END msg=audit(1347003048.054:76308): user pid=11745 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1347003048.054:76309): user pid=11745 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1347003048.055:76310): user pid=11745 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=9d:97:ab:d2:40:0b:a0:03:20:0a:32:d5:08:de:61:bd direction=? spid=11745 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1347003048.055:76311): user pid=11745 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1a:cc:2a:3f:2b:e4:4f:d6:ed:23:78:6c:71:76:51:82 direction=? spid=11745 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1347003048.055:76312): user pid=11745 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11745 suid=0 rport=44087 laddr=10.66.82.125 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1347003170.393:76313): user pid=11837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=9d:97:ab:d2:40:0b:a0:03:20:0a:32:d5:08:de:61:bd direction=? spid=11837 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1347003170.393:76314): user pid=11837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1a:cc:2a:3f:2b:e4:4f:d6:ed:23:78:6c:71:76:51:82 direction=? spid=11837 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1347003170.394:76315): user pid=11836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=11837 suid=74 rport=44091 laddr=10.66.82.125 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1347003170.394:76316): user pid=11836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=11837 suid=74 rport=44091 laddr=10.66.82.125 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success'
>type=USER_AUTH msg=audit(1347003170.449:76317): user pid=11836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed'
>type=USER_AUTH msg=audit(1347003172.297:76318): user pid=11836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success'
>type=USER_ACCT msg=audit(1347003172.302:76319): user pid=11836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1347003172.302:76320): user pid=11836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11837 suid=74 rport=44091 laddr=10.66.82.125 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success'
>type=USER_AUTH msg=audit(1347003172.303:76321): user pid=11836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1347003172.304:76322): user pid=11836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success'
>type=LOGIN msg=audit(1347003172.304:76323): pid=11836 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=62
>type=USER_ROLE_CHANGE msg=audit(1347003172.382:76324): user pid=11836 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success'
>type=USER_START msg=audit(1347003172.386:76325): user pid=11836 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1347003172.389:76326): user pid=11836 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success'
>type=USER_START msg=audit(1347003172.389:76327): user pid=11836 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1347003172.390:76328): user pid=11840 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=9d:97:ab:d2:40:0b:a0:03:20:0a:32:d5:08:de:61:bd direction=? spid=11840 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1347003172.390:76329): user pid=11840 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1a:cc:2a:3f:2b:e4:4f:d6:ed:23:78:6c:71:76:51:82 direction=? spid=11840 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success'
>type=CRED_REFR msg=audit(1347003172.391:76330): user pid=11840 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success'
>type=VIRT_MACHINE_ID msg=audit(1347003172.581:76331): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_MACHINE_ID msg=audit(1347003172.581:76332): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=unconfined_u:system_r:svirt_t:s0:c755,c757 img-ctx=unconfined_u:object_r:svirt_image_t:s0:c755,c757 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003172.732:76333): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003172.736:76334): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003172.736:76335): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003172.736:76336): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003172.736:76337): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003172.736:76338): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003172.736:76339): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003172.737:76340): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003172.737:76341): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003172.737:76342): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed'
>type=VIRT_RESOURCE msg=audit(1347003172.737:76343): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003172.737:76344): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003172.775:76345): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="macvtap0" rdev=? exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003172.775:76346): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003173.198:76347): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-disk="?" new-disk="/mnt/testkf8.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003173.198:76348): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003173.199:76349): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003173.199:76350): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_CONTROL msg=audit(1347003173.199:76351): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=migrated vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=11861 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1347003178.963:76352): user pid=11836 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1347003178.963:76353): user pid=11836 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success'
>type=USER_END msg=audit(1347003178.964:76354): user pid=11836 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1347003178.964:76355): user pid=11836 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1347003178.964:76356): user pid=11836 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=9d:97:ab:d2:40:0b:a0:03:20:0a:32:d5:08:de:61:bd direction=? spid=11836 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1347003178.964:76357): user pid=11836 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1a:cc:2a:3f:2b:e4:4f:d6:ed:23:78:6c:71:76:51:82 direction=? spid=11836 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1347003178.964:76358): user pid=11836 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11836 suid=0 rport=44091 laddr=10.66.82.125 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success'
>type=VIRT_CONTROL msg=audit(1347003270.357:76359): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=migrated vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1347003276.349:76360): user pid=11924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=9d:97:ab:d2:40:0b:a0:03:20:0a:32:d5:08:de:61:bd direction=? spid=11924 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1347003276.349:76361): user pid=11924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1a:cc:2a:3f:2b:e4:4f:d6:ed:23:78:6c:71:76:51:82 direction=? spid=11924 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1347003276.350:76362): user pid=11923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=11924 suid=74 rport=44095 laddr=10.66.82.125 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1347003276.350:76363): user pid=11923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=11924 suid=74 rport=44095 laddr=10.66.82.125 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success'
>type=USER_AUTH msg=audit(1347003276.408:76364): user pid=11923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed'
>type=USER_AUTH msg=audit(1347003277.963:76365): user pid=11923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success'
>type=USER_ACCT msg=audit(1347003277.968:76366): user pid=11923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1347003277.968:76367): user pid=11923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11924 suid=74 rport=44095 laddr=10.66.82.125 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success'
>type=USER_AUTH msg=audit(1347003277.969:76368): user pid=11923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1347003277.970:76369): user pid=11923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success'
>type=LOGIN msg=audit(1347003277.970:76370): pid=11923 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=63
>type=USER_ROLE_CHANGE msg=audit(1347003278.050:76371): user pid=11923 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success'
>type=USER_START msg=audit(1347003278.053:76372): user pid=11923 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1347003278.056:76373): user pid=11923 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success'
>type=USER_START msg=audit(1347003278.056:76374): user pid=11923 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1347003278.057:76375): user pid=11933 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=9d:97:ab:d2:40:0b:a0:03:20:0a:32:d5:08:de:61:bd direction=? spid=11933 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1347003278.057:76376): user pid=11933 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1a:cc:2a:3f:2b:e4:4f:d6:ed:23:78:6c:71:76:51:82 direction=? spid=11933 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success'
>type=CRED_REFR msg=audit(1347003278.058:76377): user pid=11933 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success'
>type=VIRT_MACHINE_ID msg=audit(1347003278.249:76378): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_MACHINE_ID msg=audit(1347003278.249:76379): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=unconfined_u:system_r:svirt_t:s0:c450,c733 img-ctx=unconfined_u:object_r:svirt_image_t:s0:c450,c733 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003278.399:76380): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003278.401:76381): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003278.401:76382): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003278.401:76383): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003278.402:76384): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003278.402:76385): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003278.402:76386): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003278.402:76387): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003278.402:76388): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003278.402:76389): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed'
>type=VIRT_RESOURCE msg=audit(1347003278.403:76390): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003278.403:76391): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003278.434:76392): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="macvtap0" rdev=? exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003278.434:76393): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=AVC msg=audit(1347003278.522:76394): avc:  denied  { read write } for  pid=11954 comm="qemu-kvm" path="/dev/tap53" dev=devtmpfs ino=54834 scontext=unconfined_u:system_r:svirt_t:s0:c450,c733 tcontext=system_u:object_r:device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1347003278.522:76394): arch=c000003e syscall=59 success=yes exit=0 a0=7f198c003bb0 a1=7f198c005cd0 a2=7f198c003490 a3=7f199bdfd6a0 items=0 ppid=1 pid=11954 auid=0 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=23 comm="qemu-kvm" exe="/usr/libexec/qemu-kvm" subj=unconfined_u:system_r:svirt_t:s0:c450,c733 key=(null)
>type=VIRT_RESOURCE msg=audit(1347003278.846:76395): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-disk="?" new-disk="/mnt/testkf8.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003278.846:76396): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003278.846:76397): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003278.846:76398): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_CONTROL msg=audit(1347003278.846:76399): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=migrated vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=11954 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_CONTROL msg=audit(1347003284.830:76400): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=failed vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1347003284.980:76401): user pid=11923 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1347003284.981:76402): user pid=11923 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success'
>type=USER_END msg=audit(1347003284.981:76403): user pid=11923 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1347003284.981:76404): user pid=11923 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1347003284.981:76405): user pid=11923 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=9d:97:ab:d2:40:0b:a0:03:20:0a:32:d5:08:de:61:bd direction=? spid=11923 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1347003284.981:76406): user pid=11923 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1a:cc:2a:3f:2b:e4:4f:d6:ed:23:78:6c:71:76:51:82 direction=? spid=11923 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1347003284.982:76407): user pid=11923 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11923 suid=0 rport=44095 laddr=10.66.82.125 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1347003287.285:76408): user pid=12003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=9d:97:ab:d2:40:0b:a0:03:20:0a:32:d5:08:de:61:bd direction=? spid=12003 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1347003287.285:76409): user pid=12003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1a:cc:2a:3f:2b:e4:4f:d6:ed:23:78:6c:71:76:51:82 direction=? spid=12003 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1347003287.286:76410): user pid=12002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=12003 suid=74 rport=44097 laddr=10.66.82.125 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1347003287.286:76411): user pid=12002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=12003 suid=74 rport=44097 laddr=10.66.82.125 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success'
>type=USER_AUTH msg=audit(1347003287.341:76412): user pid=12002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed'
>type=USER_AUTH msg=audit(1347003290.903:76413): user pid=12002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=failed'
>type=USER_AUTH msg=audit(1347003290.904:76414): user pid=12002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=failed'
>type=USER_AUTH msg=audit(1347003293.588:76415): user pid=12002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success'
>type=USER_ACCT msg=audit(1347003293.593:76416): user pid=12002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1347003293.593:76417): user pid=12002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12003 suid=74 rport=44097 laddr=10.66.82.125 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success'
>type=USER_AUTH msg=audit(1347003293.594:76418): user pid=12002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1347003293.594:76419): user pid=12002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success'
>type=LOGIN msg=audit(1347003293.594:76420): pid=12002 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=64
>type=USER_ROLE_CHANGE msg=audit(1347003293.672:76421): user pid=12002 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success'
>type=USER_START msg=audit(1347003293.675:76422): user pid=12002 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1347003293.677:76423): user pid=12002 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success'
>type=USER_START msg=audit(1347003293.677:76424): user pid=12002 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1347003293.679:76425): user pid=12007 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=9d:97:ab:d2:40:0b:a0:03:20:0a:32:d5:08:de:61:bd direction=? spid=12007 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1347003293.679:76426): user pid=12007 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1a:cc:2a:3f:2b:e4:4f:d6:ed:23:78:6c:71:76:51:82 direction=? spid=12007 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success'
>type=CRED_REFR msg=audit(1347003293.680:76427): user pid=12007 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success'
>type=VIRT_MACHINE_ID msg=audit(1347003293.872:76428): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_MACHINE_ID msg=audit(1347003293.872:76429): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-ctx=unconfined_u:system_r:svirt_t:s0:c633,c957 img-ctx=unconfined_u:object_r:svirt_image_t:s0:c633,c957 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003294.020:76430): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003294.022:76431): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003294.022:76432): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/null rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003294.022:76433): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/full rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003294.023:76434): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/zero rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003294.023:76435): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/random rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003294.023:76436): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/urandom rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003294.023:76437): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/ptmx rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003294.023:76438): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kvm rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003294.023:76439): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/kqemu rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed'
>type=VIRT_RESOURCE msg=audit(1347003294.024:76440): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/rtc rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003294.024:76441): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c cgroup="/cgroup/devices/libvirt/qemu/testkf8/" class=path path=/dev/hpet rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003294.054:76442): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="macvtap0" rdev=? exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003294.055:76443): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c net=52:54:00:1E:F2:53 path="/dev/vhost-net" rdev=0A:39 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003294.482:76444): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-disk="?" new-disk="/mnt/testkf8.qcow2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003294.482:76445): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-net=? new-net=52:54:00:1E:F2:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003294.482:76446): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-mem=0 new-mem=2097152 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_RESOURCE msg=audit(1347003294.482:76447): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=VIRT_CONTROL msg=audit(1347003294.482:76448): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=migrated vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=12028 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1347003300.247:76449): user pid=12002 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1347003300.247:76450): user pid=12002 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success'
>type=USER_END msg=audit(1347003300.248:76451): user pid=12002 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1347003300.248:76452): user pid=12002 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=zhwang addr=10.66.5.92 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1347003300.248:76453): user pid=12002 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=9d:97:ab:d2:40:0b:a0:03:20:0a:32:d5:08:de:61:bd direction=? spid=12002 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1347003300.248:76454): user pid=12002 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1a:cc:2a:3f:2b:e4:4f:d6:ed:23:78:6c:71:76:51:82 direction=? spid=12002 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1347003300.248:76455): user pid=12002 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12002 suid=0 rport=44097 laddr=10.66.82.125 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.66.5.92 terminal=? res=success'
>type=VIRT_CONTROL msg=audit(1347003313.285:76456): user pid=8741 uid=0 auid=0 ses=23 subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=migrated vm="testkf8" uuid=10a32ba1-07ae-6c03-0bc8-1f7d5093428c vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
>type=USER_ACCT msg=audit(1347003601.869:76457): user pid=12115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1347003601.869:76458): user pid=12115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1347003601.877:76459): pid=12115 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=65
>type=USER_START msg=audit(1347003601.883:76460): user pid=12115 uid=0 auid=0 ses=65 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1347003601.931:76461): user pid=12115 uid=0 auid=0 ses=65 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1347003601.931:76462): user pid=12115 uid=0 auid=0 ses=65 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'

Actions: View

Attachments on bug 851981: 607160 | 610647 | 610648