Attachment 644452 Details for Bug 876364 – audit.log

audit.log

audit.log (text/x-log), 53.73 KB, created by Brian Lane on 2012-11-13 22:59:57 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Brian Lane

Created: 2012-11-13 22:59:57 UTC

Size: 53.73 KB

patch

obsolete

>type=DAEMON_START msg=audit(1352846218.908:3732): auditd start, ver=2.2.1 format=raw kernel=3.6.6-3.fc18.x86_64 auid=4294967295 pid=418 subj=system_u:system_r:kernel_t:s0 res=success
>type=SERVICE_START msg=audit(1352846219.193:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="crond" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1352846219.486:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-logind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=NETFILTER_CFG msg=audit(1352846219.610:6): table=filter family=10 entries=0
>type=SYSCALL msg=audit(1352846219.610:6): arch=c000003e syscall=175 success=yes exit=0 a0=7fb4b1e67000 a1=1997 a2=7fb4b2bcb3e1 a3=7fb4b28f1baa items=0 ppid=461 pid=462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:kernel_t:s0 key=(null)
>type=SERVICE_START msg=audit(1352846219.756:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="ip6tables" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'
>type=NETFILTER_CFG msg=audit(1352846219.699:8): table=filter family=2 entries=4
>type=SYSCALL msg=audit(1352846219.699:8): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2665a80 items=0 ppid=417 pid=453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:kernel_t:s0 key=(null)
>type=SERVICE_START msg=audit(1352846219.846:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="iptables" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1352846220.344:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="polkit" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1352846220.521:11): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="NetworkManager" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1352846220.622:12): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="sshd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1352846221.401:13): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="sendmail" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1352846221.476:14): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="sm-client" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SYSTEM_BOOT msg=audit(1352846221.488:15): pid=519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='init exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success'
>type=SYSTEM_RUNLEVEL msg=audit(1352846221.500:16): pid=519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='old-level=N new-level=3 exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1352846221.501:17): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp-runlevel" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1352846221.501:18): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp-runlevel" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1352846222.542:19): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="sm-client" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1352846222.542:20): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="sendmail" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1352846222.558:21): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="sendmail" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1352846222.582:22): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="sm-client" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1352846231.494:23): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-readahead-done" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1352846231.494:24): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-readahead-done" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=USER_AUTH msg=audit(1352846280.631:25): pid=433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=USER_ACCT msg=audit(1352846280.632:26): pid=433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=CRED_ACQ msg=audit(1352846280.635:27): pid=433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=USER_ROLE_CHANGE msg=audit(1352846280.695:28): pid=433 uid=0 auid=0 ses=1 subj=system_u:system_r:kernel_t:s0 msg='pam: default-context=unconfined_u:system_r:abrt_helper_t:s0-s0:c0.c1023 selected-context=unconfined_u:system_r:abrt_helper_t:s0-s0:c0.c1023 exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=USER_START msg=audit(1352846280.717:29): pid=433 uid=0 auid=0 ses=1 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=CRED_REFR msg=audit(1352846280.717:30): pid=433 uid=0 auid=0 ses=1 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=USER_LOGIN msg=audit(1352846280.728:31): pid=433 uid=0 auid=0 ses=1 subj=system_u:system_r:kernel_t:s0 msg='op=login id=0 exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=AVC msg=audit(1352846280.741:32): avc:  denied  { entrypoint } for  pid=566 comm="login" path="/usr/bin/bash" dev="dm-1" ino=788774 scontext=unconfined_u:system_r:abrt_helper_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file
>type=SYSCALL msg=audit(1352846280.741:32): arch=c000003e syscall=59 success=no exit=-13 a0=1dd82b6 a1=7fffc4b37bf8 a2=1ddcdb0 a3=7fffc4b378c0 items=0 ppid=433 pid=566 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 ses=1 comm="login" exe="/usr/bin/login" subj=system_u:system_r:kernel_t:s0 key=(null)
>type=CRED_DISP msg=audit(1352846280.742:33): pid=433 uid=0 auid=0 ses=1 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=USER_END msg=audit(1352846280.745:34): pid=433 uid=0 auid=0 ses=1 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=SERVICE_STOP msg=audit(1352846280.752:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1352846280.752:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1352846280.754:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1352846280.755:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=USER_AUTH msg=audit(1352846285.579:39): pid=568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=USER_ACCT msg=audit(1352846285.580:40): pid=568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=CRED_ACQ msg=audit(1352846285.580:41): pid=568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=LOGIN msg=audit(1352846285.580:42): login pid=568 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_ROLE_CHANGE msg=audit(1352846285.620:43): pid=568 uid=0 auid=0 ses=2 subj=system_u:system_r:kernel_t:s0 msg='pam: default-context=unconfined_u:system_r:abrt_helper_t:s0-s0:c0.c1023 selected-context=unconfined_u:system_r:abrt_helper_t:s0-s0:c0.c1023 exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=USER_START msg=audit(1352846285.625:44): pid=568 uid=0 auid=0 ses=2 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=CRED_REFR msg=audit(1352846285.625:45): pid=568 uid=0 auid=0 ses=2 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=USER_LOGIN msg=audit(1352846285.625:46): pid=568 uid=0 auid=0 ses=2 subj=system_u:system_r:kernel_t:s0 msg='op=login id=0 exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=AVC msg=audit(1352846285.625:47): avc:  denied  { entrypoint } for  pid=575 comm="login" path="/usr/bin/bash" dev="dm-1" ino=788774 scontext=unconfined_u:system_r:abrt_helper_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file
>type=SYSCALL msg=audit(1352846285.625:47): arch=c000003e syscall=59 success=no exit=-13 a0=1a8c2b6 a1=7fffb0d41ff8 a2=1a90db0 a3=7fffb0d41cc0 items=0 ppid=568 pid=575 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 ses=2 comm="login" exe="/usr/bin/login" subj=system_u:system_r:kernel_t:s0 key=(null)
>type=CRED_DISP msg=audit(1352846285.626:48): pid=568 uid=0 auid=0 ses=2 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=USER_END msg=audit(1352846285.628:49): pid=568 uid=0 auid=0 ses=2 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=SERVICE_STOP msg=audit(1352846285.630:50): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1352846285.631:51): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1352846285.631:52): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1352846285.631:53): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=USER_AUTH msg=audit(1352846292.847:54): pid=577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=failed'
>type=USER_LOGIN msg=audit(1352846292.854:55): pid=577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=login id=0 exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=failed'
>type=USER_AUTH msg=audit(1352846298.841:56): pid=577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=USER_ACCT msg=audit(1352846298.842:57): pid=577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=CRED_ACQ msg=audit(1352846298.842:58): pid=577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=LOGIN msg=audit(1352846298.842:59): login pid=577 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3
>type=USER_ROLE_CHANGE msg=audit(1352846298.881:60): pid=577 uid=0 auid=0 ses=3 subj=system_u:system_r:kernel_t:s0 msg='pam: default-context=unconfined_u:system_r:abrt_helper_t:s0-s0:c0.c1023 selected-context=unconfined_u:system_r:abrt_helper_t:s0-s0:c0.c1023 exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=USER_START msg=audit(1352846298.886:61): pid=577 uid=0 auid=0 ses=3 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=CRED_REFR msg=audit(1352846298.886:62): pid=577 uid=0 auid=0 ses=3 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=USER_LOGIN msg=audit(1352846298.886:63): pid=577 uid=0 auid=0 ses=3 subj=system_u:system_r:kernel_t:s0 msg='op=login id=0 exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=AVC msg=audit(1352846298.886:64): avc:  denied  { entrypoint } for  pid=587 comm="login" path="/usr/bin/bash" dev="dm-1" ino=788774 scontext=unconfined_u:system_r:abrt_helper_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file
>type=SYSCALL msg=audit(1352846298.886:64): arch=c000003e syscall=59 success=no exit=-13 a0=19899f6 a1=7fff3dd86c18 a2=198e210 a3=7fff3dd868e0 items=0 ppid=577 pid=587 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 ses=3 comm="login" exe="/usr/bin/login" subj=system_u:system_r:kernel_t:s0 key=(null)
>type=CRED_DISP msg=audit(1352846298.887:65): pid=577 uid=0 auid=0 ses=3 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=USER_END msg=audit(1352846298.889:66): pid=577 uid=0 auid=0 ses=3 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=SERVICE_STOP msg=audit(1352846298.892:67): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1352846298.892:68): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1352846298.892:69): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1352846298.892:70): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=USER_AUTH msg=audit(1352846303.976:71): pid=589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=USER_ACCT msg=audit(1352846303.977:72): pid=589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=CRED_ACQ msg=audit(1352846303.977:73): pid=589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=LOGIN msg=audit(1352846303.977:74): login pid=589 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4
>type=USER_ROLE_CHANGE msg=audit(1352846304.016:75): pid=589 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='pam: default-context=unconfined_u:system_r:abrt_helper_t:s0-s0:c0.c1023 selected-context=unconfined_u:system_r:abrt_helper_t:s0-s0:c0.c1023 exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=USER_START msg=audit(1352846304.021:76): pid=589 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=CRED_REFR msg=audit(1352846304.021:77): pid=589 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=USER_LOGIN msg=audit(1352846304.021:78): pid=589 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='op=login id=0 exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=AVC msg=audit(1352846304.021:79): avc:  denied  { entrypoint } for  pid=597 comm="login" path="/usr/bin/bash" dev="dm-1" ino=788774 scontext=unconfined_u:system_r:abrt_helper_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file
>type=SYSCALL msg=audit(1352846304.021:79): arch=c000003e syscall=59 success=no exit=-13 a0=10e52b6 a1=7fffe0731468 a2=10e9db0 a3=7fffe0731130 items=0 ppid=589 pid=597 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 ses=4 comm="login" exe="/usr/bin/login" subj=system_u:system_r:kernel_t:s0 key=(null)
>type=CRED_DISP msg=audit(1352846304.022:80): pid=589 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=USER_END msg=audit(1352846304.025:81): pid=589 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=SERVICE_STOP msg=audit(1352846304.027:82): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1352846304.027:83): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1352846304.027:84): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1352846304.027:85): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=USER_AUTH msg=audit(1352846308.032:86): pid=599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=USER_ACCT msg=audit(1352846308.033:87): pid=599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=CRED_ACQ msg=audit(1352846308.033:88): pid=599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=LOGIN msg=audit(1352846308.033:89): login pid=599 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=5
>type=USER_ROLE_CHANGE msg=audit(1352846308.073:90): pid=599 uid=0 auid=0 ses=5 subj=system_u:system_r:kernel_t:s0 msg='pam: default-context=unconfined_u:system_r:abrt_helper_t:s0-s0:c0.c1023 selected-context=unconfined_u:system_r:abrt_helper_t:s0-s0:c0.c1023 exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=USER_START msg=audit(1352846308.077:91): pid=599 uid=0 auid=0 ses=5 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=CRED_REFR msg=audit(1352846308.077:92): pid=599 uid=0 auid=0 ses=5 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=USER_LOGIN msg=audit(1352846308.077:93): pid=599 uid=0 auid=0 ses=5 subj=system_u:system_r:kernel_t:s0 msg='op=login id=0 exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=AVC msg=audit(1352846308.078:94): avc:  denied  { entrypoint } for  pid=607 comm="login" path="/usr/bin/bash" dev="dm-1" ino=788774 scontext=unconfined_u:system_r:abrt_helper_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file
>type=SYSCALL msg=audit(1352846308.078:94): arch=c000003e syscall=59 success=no exit=-13 a0=1c492b6 a1=7fff071e2db8 a2=1c4ddb0 a3=7fff071e2a80 items=0 ppid=599 pid=607 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 ses=5 comm="login" exe="/usr/bin/login" subj=system_u:system_r:kernel_t:s0 key=(null)
>type=CRED_DISP msg=audit(1352846308.078:95): pid=599 uid=0 auid=0 ses=5 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=USER_END msg=audit(1352846308.081:96): pid=599 uid=0 auid=0 ses=5 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=SERVICE_STOP msg=audit(1352846308.087:97): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1352846308.087:98): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1352846308.088:99): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1352846308.088:100): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=USER_AUTH msg=audit(1352846312.219:101): pid=610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=USER_ACCT msg=audit(1352846312.220:102): pid=610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=CRED_ACQ msg=audit(1352846312.220:103): pid=610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=LOGIN msg=audit(1352846312.220:104): login pid=610 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=6
>type=USER_ROLE_CHANGE msg=audit(1352846312.259:105): pid=610 uid=0 auid=0 ses=6 subj=system_u:system_r:kernel_t:s0 msg='pam: default-context=unconfined_u:system_r:abrt_helper_t:s0-s0:c0.c1023 selected-context=unconfined_u:system_r:abrt_helper_t:s0-s0:c0.c1023 exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=USER_START msg=audit(1352846312.264:106): pid=610 uid=0 auid=0 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=CRED_REFR msg=audit(1352846312.264:107): pid=610 uid=0 auid=0 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=USER_LOGIN msg=audit(1352846312.264:108): pid=610 uid=0 auid=0 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=login id=0 exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=AVC msg=audit(1352846312.264:109): avc:  denied  { entrypoint } for  pid=617 comm="login" path="/usr/bin/bash" dev="dm-1" ino=788774 scontext=unconfined_u:system_r:abrt_helper_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file
>type=SYSCALL msg=audit(1352846312.264:109): arch=c000003e syscall=59 success=no exit=-13 a0=24ae2b6 a1=7fff2148c468 a2=24b2db0 a3=7fff2148c130 items=0 ppid=610 pid=617 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 ses=6 comm="login" exe="/usr/bin/login" subj=system_u:system_r:kernel_t:s0 key=(null)
>type=CRED_DISP msg=audit(1352846312.265:110): pid=610 uid=0 auid=0 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=USER_END msg=audit(1352846312.267:111): pid=610 uid=0 auid=0 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=SERVICE_STOP msg=audit(1352846312.269:112): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1352846312.270:113): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1352846312.270:114): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1352846312.270:115): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=USER_AUTH msg=audit(1352846352.272:116): pid=619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=USER_ACCT msg=audit(1352846352.274:117): pid=619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=CRED_ACQ msg=audit(1352846352.274:118): pid=619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=LOGIN msg=audit(1352846352.274:119): login pid=619 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=7
>type=USER_ROLE_CHANGE msg=audit(1352846352.313:120): pid=619 uid=0 auid=0 ses=7 subj=system_u:system_r:kernel_t:s0 msg='pam: default-context=unconfined_u:system_r:abrt_helper_t:s0-s0:c0.c1023 selected-context=unconfined_u:system_r:abrt_helper_t:s0-s0:c0.c1023 exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=USER_START msg=audit(1352846352.317:121): pid=619 uid=0 auid=0 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=CRED_REFR msg=audit(1352846352.317:122): pid=619 uid=0 auid=0 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=USER_LOGIN msg=audit(1352846352.317:123): pid=619 uid=0 auid=0 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=login id=0 exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=AVC msg=audit(1352846352.317:124): avc:  denied  { entrypoint } for  pid=626 comm="login" path="/usr/bin/bash" dev="dm-1" ino=788774 scontext=unconfined_u:system_r:abrt_helper_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file
>type=SYSCALL msg=audit(1352846352.317:124): arch=c000003e syscall=59 success=no exit=-13 a0=17252b6 a1=7fff2d4172e8 a2=1729db0 a3=7fff2d416fb0 items=0 ppid=619 pid=626 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 ses=7 comm="login" exe="/usr/bin/login" subj=system_u:system_r:kernel_t:s0 key=(null)
>type=CRED_DISP msg=audit(1352846352.318:125): pid=619 uid=0 auid=0 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=USER_END msg=audit(1352846352.320:126): pid=619 uid=0 auid=0 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=SERVICE_STOP msg=audit(1352846352.323:127): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1352846352.323:128): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1352846352.323:129): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1352846352.324:130): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=USER_AUTH msg=audit(1352846359.669:131): pid=628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=USER_ACCT msg=audit(1352846359.670:132): pid=628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=CRED_ACQ msg=audit(1352846359.670:133): pid=628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=LOGIN msg=audit(1352846359.670:134): login pid=628 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=8
>type=USER_ROLE_CHANGE msg=audit(1352846359.710:135): pid=628 uid=0 auid=0 ses=8 subj=system_u:system_r:kernel_t:s0 msg='pam: default-context=unconfined_u:system_r:abrt_helper_t:s0-s0:c0.c1023 selected-context=unconfined_u:system_r:abrt_helper_t:s0-s0:c0.c1023 exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=USER_START msg=audit(1352846359.714:136): pid=628 uid=0 auid=0 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=CRED_REFR msg=audit(1352846359.714:137): pid=628 uid=0 auid=0 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=USER_LOGIN msg=audit(1352846359.714:138): pid=628 uid=0 auid=0 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=login id=0 exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=AVC msg=audit(1352846359.715:139): avc:  denied  { entrypoint } for  pid=635 comm="login" path="/usr/bin/bash" dev="dm-1" ino=788774 scontext=unconfined_u:system_r:abrt_helper_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file
>type=SYSCALL msg=audit(1352846359.715:139): arch=c000003e syscall=59 success=no exit=-13 a0=22532b6 a1=7fff46caa898 a2=2257db0 a3=7fff46caa560 items=0 ppid=628 pid=635 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 ses=8 comm="login" exe="/usr/bin/login" subj=system_u:system_r:kernel_t:s0 key=(null)
>type=CRED_DISP msg=audit(1352846359.715:140): pid=628 uid=0 auid=0 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=USER_END msg=audit(1352846359.718:141): pid=628 uid=0 auid=0 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=SERVICE_STOP msg=audit(1352846359.720:142): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1352846359.720:143): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1352846359.720:144): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1352846359.721:145): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=USER_AUTH msg=audit(1352846364.558:146): pid=637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=USER_ACCT msg=audit(1352846364.559:147): pid=637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=CRED_ACQ msg=audit(1352846364.559:148): pid=637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=LOGIN msg=audit(1352846364.559:149): login pid=637 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=9
>type=USER_ROLE_CHANGE msg=audit(1352846364.598:150): pid=637 uid=0 auid=0 ses=9 subj=system_u:system_r:kernel_t:s0 msg='pam: default-context=unconfined_u:system_r:abrt_helper_t:s0-s0:c0.c1023 selected-context=unconfined_u:system_r:abrt_helper_t:s0-s0:c0.c1023 exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=USER_START msg=audit(1352846364.602:151): pid=637 uid=0 auid=0 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=CRED_REFR msg=audit(1352846364.602:152): pid=637 uid=0 auid=0 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=USER_LOGIN msg=audit(1352846364.602:153): pid=637 uid=0 auid=0 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=login id=0 exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=AVC msg=audit(1352846364.603:154): avc:  denied  { entrypoint } for  pid=644 comm="login" path="/usr/bin/bash" dev="dm-1" ino=788774 scontext=unconfined_u:system_r:abrt_helper_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file
>type=SYSCALL msg=audit(1352846364.603:154): arch=c000003e syscall=59 success=no exit=-13 a0=c162b6 a1=7fff1b6e2b28 a2=c1adb0 a3=7fff1b6e27f0 items=0 ppid=637 pid=644 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 ses=9 comm="login" exe="/usr/bin/login" subj=system_u:system_r:kernel_t:s0 key=(null)
>type=CRED_DISP msg=audit(1352846364.603:155): pid=637 uid=0 auid=0 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=USER_END msg=audit(1352846364.606:156): pid=637 uid=0 auid=0 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=SERVICE_STOP msg=audit(1352846364.608:157): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1352846364.608:158): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1352846364.608:159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1352846364.609:160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1352846375.105:161): pid=650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=destroy kind=server fp=f6:23:e1:b6:34:2b:b6:c8:bb:87:c4:c2:a3:34:06:59 direction=? spid=650 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.101.5 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1352846375.105:162): pid=650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=destroy kind=server fp=37:d4:1d:50:df:f3:7b:00:d6:3b:c9:72:5f:c8:8e:26 direction=? spid=650 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.101.5 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1352846375.106:163): pid=649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=650 suid=74 rport=56921 laddr=192.168.101.102 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.101.5 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1352846375.106:164): pid=649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=650 suid=74 rport=56921 laddr=192.168.101.102 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.101.5 terminal=? res=success'
>type=USER_AUTH msg=audit(1352846375.205:165): pid=649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.101.5 terminal=ssh res=failed'
>type=USER_AUTH msg=audit(1352846377.898:166): pid=649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=192.168.101.5 addr=192.168.101.5 terminal=ssh res=success'
>type=USER_ACCT msg=audit(1352846377.899:167): pid=649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=192.168.101.5 addr=192.168.101.5 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1352846377.900:168): pid=649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=destroy kind=session fp=? direction=both spid=650 suid=74 rport=56921 laddr=192.168.101.102 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.101.5 terminal=? res=success'
>type=USER_AUTH msg=audit(1352846377.900:169): pid=649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.101.5 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1352846377.900:170): pid=649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=192.168.101.5 addr=192.168.101.5 terminal=ssh res=success'
>type=LOGIN msg=audit(1352846377.900:171): login pid=649 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=10
>type=USER_ROLE_CHANGE msg=audit(1352846377.940:172): pid=649 uid=0 auid=0 ses=10 subj=system_u:system_r:kernel_t:s0 msg='pam: default-context=unconfined_u:system_r:abrt_helper_t:s0-s0:c0.c1023 selected-context=unconfined_u:system_r:abrt_helper_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.101.5 addr=192.168.101.5 terminal=ssh res=failed'
>type=USER_START msg=audit(1352846377.944:173): pid=649 uid=0 auid=0 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=192.168.101.5 addr=192.168.101.5 terminal=ssh res=failed'
>type=CRED_DISP msg=audit(1352846377.944:174): pid=649 uid=0 auid=0 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=192.168.101.5 addr=192.168.101.5 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1352846377.944:175): pid=649 uid=0 auid=0 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=destroy kind=server fp=f6:23:e1:b6:34:2b:b6:c8:bb:87:c4:c2:a3:34:06:59 direction=? spid=649 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.101.5 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1352846377.944:176): pid=649 uid=0 auid=0 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=destroy kind=server fp=37:d4:1d:50:df:f3:7b:00:d6:3b:c9:72:5f:c8:8e:26 direction=? spid=649 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.101.5 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1352846384.187:177): pid=657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=destroy kind=server fp=f6:23:e1:b6:34:2b:b6:c8:bb:87:c4:c2:a3:34:06:59 direction=? spid=657 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.101.5 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1352846384.187:178): pid=657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=destroy kind=server fp=37:d4:1d:50:df:f3:7b:00:d6:3b:c9:72:5f:c8:8e:26 direction=? spid=657 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.101.5 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1352846384.188:179): pid=656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=657 suid=74 rport=56922 laddr=192.168.101.102 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.101.5 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1352846384.188:180): pid=656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=657 suid=74 rport=56922 laddr=192.168.101.102 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.101.5 terminal=? res=success'
>type=USER_AUTH msg=audit(1352846384.260:181): pid=656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.101.5 terminal=ssh res=failed'
>type=USER_AUTH msg=audit(1352846386.790:182): pid=656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=192.168.101.5 addr=192.168.101.5 terminal=ssh res=success'
>type=USER_ACCT msg=audit(1352846386.791:183): pid=656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=192.168.101.5 addr=192.168.101.5 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1352846386.792:184): pid=656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=destroy kind=session fp=? direction=both spid=657 suid=74 rport=56922 laddr=192.168.101.102 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.101.5 terminal=? res=success'
>type=USER_AUTH msg=audit(1352846386.792:185): pid=656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.101.5 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1352846386.792:186): pid=656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=192.168.101.5 addr=192.168.101.5 terminal=ssh res=success'
>type=LOGIN msg=audit(1352846386.792:187): login pid=656 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=11
>type=USER_ROLE_CHANGE msg=audit(1352846386.837:188): pid=656 uid=0 auid=0 ses=11 subj=system_u:system_r:kernel_t:s0 msg='pam: default-context=unconfined_u:system_r:abrt_helper_t:s0-s0:c0.c1023 selected-context=unconfined_u:system_r:abrt_helper_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.101.5 addr=192.168.101.5 terminal=ssh res=failed'
>type=USER_START msg=audit(1352846386.840:189): pid=656 uid=0 auid=0 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=192.168.101.5 addr=192.168.101.5 terminal=ssh res=failed'
>type=CRED_DISP msg=audit(1352846386.840:190): pid=656 uid=0 auid=0 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=192.168.101.5 addr=192.168.101.5 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1352846386.841:191): pid=656 uid=0 auid=0 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=destroy kind=server fp=f6:23:e1:b6:34:2b:b6:c8:bb:87:c4:c2:a3:34:06:59 direction=? spid=656 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.101.5 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1352846386.841:192): pid=656 uid=0 auid=0 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=destroy kind=server fp=37:d4:1d:50:df:f3:7b:00:d6:3b:c9:72:5f:c8:8e:26 direction=? spid=656 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.101.5 terminal=? res=success'
>type=DAEMON_START msg=audit(1352847007.232:894): auditd start, ver=2.2.1 format=raw kernel=3.6.6-3.fc18.x86_64 auid=4294967295 pid=427 res=success
>type=SERVICE_START msg=audit(1352847007.666:3): pid=1 uid=0 auid=4294967295 ses=4294967295 msg=' comm="systemd-logind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=NETFILTER_CFG msg=audit(1352847007.929:4): table=filter family=10 entries=0
>type=SYSCALL msg=audit(1352847007.929:4): arch=c000003e syscall=175 success=yes exit=0 a0=7f0c9bef5000 a1=1997 a2=7f0c9cc593e1 a3=7f0c9c97fbaa items=0 ppid=469 pid=470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" key=(null)
>type=NETFILTER_CFG msg=audit(1352847007.951:5): table=filter family=2 entries=4
>type=SYSCALL msg=audit(1352847007.951:5): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=14a6a80 items=0 ppid=426 pid=466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" key=(null)
>type=SERVICE_START msg=audit(1352847008.130:6): pid=1 uid=0 auid=4294967295 ses=4294967295 msg=' comm="iptables" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=NETFILTER_CFG msg=audit(1352847007.985:7): table=filter family=10 entries=4
>type=SYSCALL msg=audit(1352847007.985:7): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1960a60 items=0 ppid=425 pid=467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" key=(null)
>type=SERVICE_START msg=audit(1352847008.159:8): pid=1 uid=0 auid=4294967295 ses=4294967295 msg=' comm="ip6tables" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1352847008.676:9): pid=1 uid=0 auid=4294967295 ses=4294967295 msg=' comm="polkit" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1352847008.836:10): pid=1 uid=0 auid=4294967295 ses=4294967295 msg=' comm="NetworkManager" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1352847009.012:11): pid=1 uid=0 auid=4294967295 ses=4294967295 msg=' comm="sshd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1352847009.758:12): pid=1 uid=0 auid=4294967295 ses=4294967295 msg=' comm="sendmail" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1352847009.825:13): pid=1 uid=0 auid=4294967295 ses=4294967295 msg=' comm="sm-client" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SYSTEM_BOOT msg=audit(1352847009.837:14): pid=530 uid=0 auid=4294967295 ses=4294967295 msg='init exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success'
>type=SYSTEM_RUNLEVEL msg=audit(1352847009.851:15): pid=530 uid=0 auid=4294967295 ses=4294967295 msg='old-level=N new-level=3 exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1352847009.851:16): pid=1 uid=0 auid=4294967295 ses=4294967295 msg=' comm="systemd-update-utmp-runlevel" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1352847009.851:17): pid=1 uid=0 auid=4294967295 ses=4294967295 msg=' comm="systemd-update-utmp-runlevel" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1352847010.987:18): pid=1 uid=0 auid=4294967295 ses=4294967295 msg=' comm="sm-client" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1352847010.988:19): pid=1 uid=0 auid=4294967295 ses=4294967295 msg=' comm="sendmail" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1352847011.003:20): pid=1 uid=0 auid=4294967295 ses=4294967295 msg=' comm="sendmail" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1352847011.021:21): pid=1 uid=0 auid=4294967295 ses=4294967295 msg=' comm="sm-client" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=USER_AUTH msg=audit(1352847014.001:22): pid=442 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=USER_ACCT msg=audit(1352847014.001:23): pid=442 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=CRED_ACQ msg=audit(1352847014.007:24): pid=442 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=USER_START msg=audit(1352847014.017:25): pid=442 uid=0 auid=0 ses=1 msg='op=PAM:session_open acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=CRED_REFR msg=audit(1352847014.017:26): pid=442 uid=0 auid=0 ses=1 msg='op=PAM:setcred acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=USER_LOGIN msg=audit(1352847014.025:27): pid=442 uid=0 auid=0 ses=1 msg='op=login id=0 exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success'
>type=SERVICE_START msg=audit(1352847019.835:28): pid=1 uid=0 auid=4294967295 ses=4294967295 msg=' comm="systemd-readahead-done" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1352847019.835:29): pid=1 uid=0 auid=4294967295 ses=4294967295 msg=' comm="systemd-readahead-done" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1352847065.703:30): pid=591 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=f6:23:e1:b6:34:2b:b6:c8:bb:87:c4:c2:a3:34:06:59 direction=? spid=591 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.101.5 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1352847065.703:31): pid=591 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=37:d4:1d:50:df:f3:7b:00:d6:3b:c9:72:5f:c8:8e:26 direction=? spid=591 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.101.5 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1352847065.703:32): pid=590 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=591 suid=74 rport=56949 laddr=192.168.101.102 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.101.5 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1352847065.704:33): pid=590 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=591 suid=74 rport=56949 laddr=192.168.101.102 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.101.5 terminal=? res=success'
>type=USER_AUTH msg=audit(1352847065.804:34): pid=590 uid=0 auid=4294967295 ses=4294967295 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.101.5 terminal=ssh res=failed'
>type=USER_AUTH msg=audit(1352847068.017:35): pid=590 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=192.168.101.5 addr=192.168.101.5 terminal=ssh res=success'
>type=USER_ACCT msg=audit(1352847068.017:36): pid=590 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=192.168.101.5 addr=192.168.101.5 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1352847068.019:37): pid=590 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=session fp=? direction=both spid=591 suid=74 rport=56949 laddr=192.168.101.102 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.101.5 terminal=? res=success'
>type=USER_AUTH msg=audit(1352847068.019:38): pid=590 uid=0 auid=4294967295 ses=4294967295 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.101.5 terminal=ssh res=success'

Actions: View

Attachments on bug 876364: 644452