Attachment 680328 Details for Bug 896624 – audit.log

audit.log

audit.log (text/x-log), 40.85 KB, created by Roman Rakus on 2013-01-17 16:19:42 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Roman Rakus

Created: 2013-01-17 16:19:42 UTC

Size: 40.85 KB

patch

obsolete

>type=USER_AUTH msg=audit(1358433788.319:4434): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358433788.326:4435): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=AVC msg=audit(1358433788.470:4436): avc:  denied  { read } for  pid=25596 comm="cimprovagt" name="wtmp" dev="vda3" ino=146104 scontext=system_u:system_r:pegasus_t:s0 tcontext=system_u:object_r:wtmp_t:s0 tclass=file
>type=AVC msg=audit(1358433788.470:4436): avc:  denied  { open } for  pid=25596 comm="cimprovagt" path="/var/log/wtmp" dev="vda3" ino=146104 scontext=system_u:system_r:pegasus_t:s0 tcontext=system_u:object_r:wtmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1358433788.470:4436): arch=c000003e syscall=2 success=yes exit=3 a0=7f94f408a240 a1=80000 a2=7f94f408a240 a3=7f95007f3d30 items=0 ppid=1 pid=25596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cimprovagt" exe="/usr/libexec/pegasus/cimprovagt" subj=system_u:system_r:pegasus_t:s0 key=(null)
>type=DEL_USER msg=audit(1358433789.415:4437): pid=25617 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting user not found acct="account_test_user" exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/1 res=failed'
>type=USER_AUTH msg=audit(1358433789.505:4438): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358433789.507:4439): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_AUTH msg=audit(1358433789.623:4440): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358433789.625:4441): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_AUTH msg=audit(1358433789.706:4442): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358433789.709:4443): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=AVC msg=audit(1358433789.735:4444): avc:  denied  { write } for  pid=25596 comm="cimprovagt" name="group-" dev="vda3" ino=22898 scontext=system_u:system_r:pegasus_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file
>type=SYSCALL msg=audit(1358433789.735:4444): arch=c000003e syscall=2 success=yes exit=12 a0=7f94f4023170 a1=41 a2=81a4 a3=c items=0 ppid=1 pid=25596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cimprovagt" exe="/usr/libexec/pegasus/cimprovagt" subj=system_u:system_r:pegasus_t:s0 key=(null)
>type=AVC msg=audit(1358433789.744:4445): avc:  denied  { setattr } for  pid=25596 comm="cimprovagt" name="group-" dev="vda3" ino=22898 scontext=system_u:system_r:pegasus_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file
>type=SYSCALL msg=audit(1358433789.744:4445): arch=c000003e syscall=93 success=yes exit=0 a0=c a1=0 a2=0 a3=28 items=0 ppid=1 pid=25596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cimprovagt" exe="/usr/libexec/pegasus/cimprovagt" subj=system_u:system_r:pegasus_t:s0 key=(null)
>type=AVC msg=audit(1358433789.798:4446): avc:  denied  { write } for  pid=25596 comm="cimprovagt" name="gshadow-" dev="vda3" ino=50 scontext=system_u:system_r:pegasus_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file
>type=SYSCALL msg=audit(1358433789.798:4446): arch=c000003e syscall=2 success=yes exit=12 a0=7f94f4010fa0 a1=41 a2=8000 a3=e items=0 ppid=1 pid=25596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cimprovagt" exe="/usr/libexec/pegasus/cimprovagt" subj=system_u:system_r:pegasus_t:s0 key=(null)
>type=AVC msg=audit(1358433789.798:4447): avc:  denied  { setattr } for  pid=25596 comm="cimprovagt" name="gshadow-" dev="vda3" ino=50 scontext=system_u:system_r:pegasus_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file
>type=SYSCALL msg=audit(1358433789.798:4447): arch=c000003e syscall=93 success=yes exit=0 a0=c a1=0 a2=0 a3=28 items=0 ppid=1 pid=25596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cimprovagt" exe="/usr/libexec/pegasus/cimprovagt" subj=system_u:system_r:pegasus_t:s0 key=(null)
>type=AVC msg=audit(1358433789.908:4448): avc:  denied  { write } for  pid=25596 comm="cimprovagt" name="home" dev="vda3" ino=129321 scontext=system_u:system_r:pegasus_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir
>type=AVC msg=audit(1358433789.908:4448): avc:  denied  { add_name } for  pid=25596 comm="cimprovagt" name="account_test_user" scontext=system_u:system_r:pegasus_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir
>type=AVC msg=audit(1358433789.908:4448): avc:  denied  { create } for  pid=25596 comm="cimprovagt" name="account_test_user" scontext=system_u:system_r:pegasus_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1358433789.908:4448): arch=c000003e syscall=83 success=yes exit=0 a0=7f94f4030550 a1=1c0 a2=0 a3=7f95007f36d0 items=0 ppid=1 pid=25596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cimprovagt" exe="/usr/libexec/pegasus/cimprovagt" subj=system_u:system_r:pegasus_t:s0 key=(null)
>type=AVC msg=audit(1358433789.908:4449): avc:  denied  { setattr } for  pid=25596 comm="cimprovagt" name="account_test_user" dev="vda3" ino=210106 scontext=system_u:system_r:pegasus_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1358433789.908:4449): arch=c000003e syscall=92 success=yes exit=0 a0=7f94f4030550 a1=3ed a2=3e9 a3=7f95007f36d0 items=0 ppid=1 pid=25596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cimprovagt" exe="/usr/libexec/pegasus/cimprovagt" subj=system_u:system_r:pegasus_t:s0 key=(null)
>type=DEL_USER msg=audit(1358433790.001:4450): pid=25654 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting user entries id=1005 exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/1 res=success'
>type=DEL_GROUP msg=audit(1358433790.004:4451): pid=25654 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting group acct="account_test_user" exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/1 res=success'
>type=DEL_GROUP msg=audit(1358433790.004:4452): pid=25654 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting shadow group acct="account_test_user" exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/1 res=success'
>type=AVC msg=audit(1358433790.004:4453): avc:  denied  { rmdir } for  pid=25654 comm="userdel" name="account_test_user" dev="vda3" ino=210106 scontext=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1358433790.004:4453): arch=c000003e syscall=84 success=yes exit=0 a0=7fcdec5416f0 a1=0 a2=56a0 a3=8028 items=0 ppid=25588 pid=25654 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=27 comm="userdel" exe="/usr/sbin/userdel" subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 key=(null)
>type=DEL_USER msg=audit(1358433790.005:4454): pid=25654 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting home directory id=1005 exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/1 res=success'
>type=DEL_USER msg=audit(1358433790.309:4455): pid=25681 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting user not found acct="account_test_user" exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/1 res=failed'
>type=ADD_GROUP msg=audit(1358433790.330:4456): pid=25684 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=adding group acct="account_test_user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=pts/1 res=success'
>type=ADD_USER msg=audit(1358433790.385:4457): pid=25684 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=1007 exe="/usr/sbin/useradd" hostname=? addr=? terminal=pts/1 res=success'
>type=ADD_USER msg=audit(1358433790.388:4458): pid=25684 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=adding home directory id=1007 exe="/usr/sbin/useradd" hostname=? addr=? terminal=pts/1 res=success'
>type=USER_AUTH msg=audit(1358433790.794:4459): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358433790.800:4460): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_AUTH msg=audit(1358433791.007:4461): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358433791.013:4462): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=DEL_USER msg=audit(1358433791.098:4463): pid=25736 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting user not found acct="account_test_user" exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/1 res=failed'
>type=DEL_GROUP msg=audit(1358433791.175:4464): pid=25739 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=removing group from /etc/group id=1007 exe="/usr/sbin/groupdel" hostname=? addr=? terminal=pts/1 res=success'
>type=DEL_GROUP msg=audit(1358433791.243:4465): pid=25739 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=removing group from /etc/gshadow id=1007 exe="/usr/sbin/groupdel" hostname=? addr=? terminal=pts/1 res=success'
>type=DEL_GROUP msg=audit(1358433791.243:4466): pid=25739 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op= id=1007 exe="/usr/sbin/groupdel" hostname=? addr=? terminal=pts/1 res=success'
>type=DEL_USER msg=audit(1358433791.260:4467): pid=25751 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting user not found acct="account_test_user" exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/1 res=failed'
>type=ADD_GROUP msg=audit(1358433791.279:4468): pid=25755 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=adding group acct="account_test_user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=pts/1 res=success'
>type=ADD_USER msg=audit(1358433791.345:4469): pid=25755 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=1007 exe="/usr/sbin/useradd" hostname=? addr=? terminal=pts/1 res=success'
>type=ADD_USER msg=audit(1358433791.347:4470): pid=25755 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=adding home directory id=1007 exe="/usr/sbin/useradd" hostname=? addr=? terminal=pts/1 res=success'
>type=USER_AUTH msg=audit(1358433791.652:4471): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358433791.655:4472): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=AVC msg=audit(1358433791.660:4473): avc:  denied  { read } for  pid=25596 comm="cimprovagt" name="wtmp" dev="vda3" ino=146104 scontext=system_u:system_r:pegasus_t:s0 tcontext=system_u:object_r:wtmp_t:s0 tclass=file
>type=AVC msg=audit(1358433791.660:4473): avc:  denied  { open } for  pid=25596 comm="cimprovagt" path="/var/log/wtmp" dev="vda3" ino=146104 scontext=system_u:system_r:pegasus_t:s0 tcontext=system_u:object_r:wtmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1358433791.660:4473): arch=c000003e syscall=2 success=yes exit=10 a0=7f94f408a240 a1=80000 a2=7f94f408a240 a3=8 items=0 ppid=1 pid=25596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cimprovagt" exe="/usr/libexec/pegasus/cimprovagt" subj=system_u:system_r:pegasus_t:s0 key=(null)
>type=USER_AUTH msg=audit(1358433791.872:4474): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358433791.877:4475): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_AUTH msg=audit(1358433792.071:4476): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358433792.077:4477): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_AUTH msg=audit(1358433792.225:4478): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358433792.228:4479): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=DEL_USER msg=audit(1358433792.406:4480): pid=25794 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting user entries id=1007 exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/1 res=success'
>type=DEL_GROUP msg=audit(1358433792.407:4481): pid=25794 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting group acct="account_test_user" exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/1 res=success'
>type=DEL_GROUP msg=audit(1358433792.408:4482): pid=25794 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting shadow group acct="account_test_user" exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/1 res=success'
>type=DEL_USER msg=audit(1358433792.408:4483): pid=25794 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting mail file id=1007 exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/1 res=success'
>type=DEL_USER msg=audit(1358433792.408:4484): pid=25794 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting home directory id=1007 exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/1 res=success'
>type=USER_AUTH msg=audit(1358433792.770:4485): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358433792.772:4486): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_AUTH msg=audit(1358433792.854:4487): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358433792.857:4488): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_AUTH msg=audit(1358433792.939:4489): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358433792.942:4490): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=DEL_GROUP msg=audit(1358433793.161:4491): pid=25818 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=removing group from /etc/group id=1001 exe="/usr/sbin/groupdel" hostname=? addr=? terminal=pts/1 res=success'
>type=DEL_GROUP msg=audit(1358433793.221:4492): pid=25818 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=removing group from /etc/gshadow id=1001 exe="/usr/sbin/groupdel" hostname=? addr=? terminal=pts/1 res=success'
>type=DEL_GROUP msg=audit(1358433793.221:4493): pid=25818 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op= id=1001 exe="/usr/sbin/groupdel" hostname=? addr=? terminal=pts/1 res=success'
>type=ADD_GROUP msg=audit(1358433793.323:4494): pid=25832 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=1010 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=pts/1 res=success'
>type=ADD_GROUP msg=audit(1358433793.391:4495): pid=25832 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=1010 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=pts/1 res=success'
>type=ADD_GROUP msg=audit(1358433793.392:4496): pid=25832 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op= id=1010 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=pts/1 res=success'
>type=USER_AUTH msg=audit(1358433793.471:4497): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358433793.473:4498): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_AUTH msg=audit(1358433793.564:4499): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358433793.566:4500): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_AUTH msg=audit(1358433793.720:4501): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358433793.722:4502): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=DEL_USER msg=audit(1358433793.959:4503): pid=25846 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting user not found acct="account_test_user" exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/1 res=failed'
>type=ADD_GROUP msg=audit(1358433793.971:4504): pid=25849 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=adding group acct="account_test_user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=pts/1 res=success'
>type=ADD_USER msg=audit(1358433794.102:4505): pid=25849 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=1007 exe="/usr/sbin/useradd" hostname=? addr=? terminal=pts/1 res=success'
>type=ADD_USER msg=audit(1358433794.105:4506): pid=25849 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=adding home directory id=1007 exe="/usr/sbin/useradd" hostname=? addr=? terminal=pts/1 res=success'
>type=ADD_GROUP msg=audit(1358433794.444:4507): pid=25855 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=1010 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=pts/1 res=success'
>type=ADD_GROUP msg=audit(1358433794.511:4508): pid=25855 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=1010 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=pts/1 res=success'
>type=ADD_GROUP msg=audit(1358433794.513:4509): pid=25855 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op= id=1010 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=pts/1 res=success'
>type=USER_AUTH msg=audit(1358433794.593:4510): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358433794.596:4511): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_AUTH msg=audit(1358433794.717:4512): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358433794.719:4513): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_AUTH msg=audit(1358433794.805:4514): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358433794.808:4515): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=DEL_USER msg=audit(1358433794.921:4516): pid=25868 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting user entries id=1007 exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/1 res=success'
>type=DEL_GROUP msg=audit(1358433794.922:4517): pid=25868 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting group acct="account_test_user" exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/1 res=success'
>type=DEL_GROUP msg=audit(1358433794.922:4518): pid=25868 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting shadow group acct="account_test_user" exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/1 res=success'
>type=DEL_USER msg=audit(1358433794.923:4519): pid=25868 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting mail file id=1007 exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/1 res=success'
>type=DEL_USER msg=audit(1358433794.923:4520): pid=25868 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting home directory id=1007 exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/1 res=success'
>type=DEL_GROUP msg=audit(1358433795.226:4521): pid=25875 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=removing group from /etc/group id=1010 exe="/usr/sbin/groupdel" hostname=? addr=? terminal=pts/1 res=success'
>type=DEL_GROUP msg=audit(1358433795.286:4522): pid=25875 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=removing group from /etc/gshadow id=1010 exe="/usr/sbin/groupdel" hostname=? addr=? terminal=pts/1 res=success'
>type=DEL_GROUP msg=audit(1358433795.288:4523): pid=25875 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op= id=1010 exe="/usr/sbin/groupdel" hostname=? addr=? terminal=pts/1 res=success'
>type=DEL_USER msg=audit(1358433795.296:4524): pid=25879 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting user not found acct="account_test_user" exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/1 res=failed'
>type=ADD_GROUP msg=audit(1358433795.314:4525): pid=25882 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=adding group acct="account_test_user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=pts/1 res=success'
>type=ADD_USER msg=audit(1358433795.363:4526): pid=25882 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=1007 exe="/usr/sbin/useradd" hostname=? addr=? terminal=pts/1 res=success'
>type=ADD_USER msg=audit(1358433795.366:4527): pid=25882 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=adding home directory id=1007 exe="/usr/sbin/useradd" hostname=? addr=? terminal=pts/1 res=success'
>type=USER_AUTH msg=audit(1358433795.714:4528): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358433795.717:4529): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_AUTH msg=audit(1358433795.844:4530): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358433795.846:4531): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=AVC msg=audit(1358433795.848:4532): avc:  denied  { write } for  pid=25596 comm="cimprovagt" name="passwd-" dev="vda3" ino=22906 scontext=system_u:system_r:pegasus_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file
>type=SYSCALL msg=audit(1358433795.848:4532): arch=c000003e syscall=2 success=yes exit=15 a0=7f94f403bfd0 a1=41 a2=81a4 a3=d items=0 ppid=1 pid=25596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cimprovagt" exe="/usr/libexec/pegasus/cimprovagt" subj=system_u:system_r:pegasus_t:s0 key=(null)
>type=AVC msg=audit(1358433795.857:4533): avc:  denied  { setattr } for  pid=25596 comm="cimprovagt" name="passwd-" dev="vda3" ino=22906 scontext=system_u:system_r:pegasus_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file
>type=SYSCALL msg=audit(1358433795.857:4533): arch=c000003e syscall=93 success=yes exit=0 a0=f a1=0 a2=0 a3=28 items=0 ppid=1 pid=25596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cimprovagt" exe="/usr/libexec/pegasus/cimprovagt" subj=system_u:system_r:pegasus_t:s0 key=(null)
>type=DEL_USER msg=audit(1358433795.940:4534): pid=25900 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting user not found acct="account_test_user" exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/1 res=failed'
>type=DEL_GROUP msg=audit(1358433796.017:4535): pid=25901 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=removing group from /etc/group id=1007 exe="/usr/sbin/groupdel" hostname=? addr=? terminal=pts/1 res=success'
>type=DEL_GROUP msg=audit(1358433796.068:4536): pid=25901 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=removing group from /etc/gshadow id=1007 exe="/usr/sbin/groupdel" hostname=? addr=? terminal=pts/1 res=success'
>type=DEL_GROUP msg=audit(1358433796.069:4537): pid=25901 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op= id=1007 exe="/usr/sbin/groupdel" hostname=? addr=? terminal=pts/1 res=success'
>type=DEL_USER msg=audit(1358433796.089:4538): pid=25912 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting user not found acct="account_test_user" exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/1 res=failed'
>type=ADD_GROUP msg=audit(1358433796.109:4539): pid=25917 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=adding group acct="account_test_user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=pts/1 res=success'
>type=ADD_USER msg=audit(1358433796.137:4540): pid=25917 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=1007 exe="/usr/sbin/useradd" hostname=? addr=? terminal=pts/1 res=success'
>type=ADD_USER msg=audit(1358433796.140:4541): pid=25917 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=adding home directory id=1007 exe="/usr/sbin/useradd" hostname=? addr=? terminal=pts/1 res=success'
>type=ADD_GROUP msg=audit(1358433796.440:4542): pid=25929 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=1010 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=pts/1 res=success'
>type=ADD_GROUP msg=audit(1358433796.500:4543): pid=25929 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=1010 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=pts/1 res=success'
>type=ADD_GROUP msg=audit(1358433796.501:4544): pid=25929 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op= id=1010 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=pts/1 res=success'
>type=USER_CHAUTHTOK msg=audit(1358433796.511:4545): pid=25933 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user to group acct="account_test_user" exe="/usr/sbin/usermod" hostname=? addr=? terminal=pts/1 res=success'
>type=USER_CHAUTHTOK msg=audit(1358433796.512:4546): pid=25933 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user to shadow group acct="account_test_user" exe="/usr/sbin/usermod" hostname=? addr=? terminal=pts/1 res=success'
>type=USER_AUTH msg=audit(1358433796.724:4547): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358433796.727:4548): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_AUTH msg=audit(1358433796.847:4549): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358433796.850:4550): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_AUTH msg=audit(1358433796.936:4551): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358433796.938:4552): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=DEL_USER msg=audit(1358433796.992:4553): pid=25948 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting user entries id=1007 exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/1 res=success'
>type=DEL_USER msg=audit(1358433796.993:4554): pid=25948 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting user from group id=1007 exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/1 res=success'
>type=DEL_GROUP msg=audit(1358433796.993:4555): pid=25948 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting group acct="account_test_user" exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/1 res=success'
>type=DEL_GROUP msg=audit(1358433796.994:4556): pid=25948 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting shadow group acct="account_test_user" exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/1 res=success'
>type=DEL_USER msg=audit(1358433796.994:4557): pid=25948 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting user from shadow group id=1007 exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/1 res=success'
>type=DEL_USER msg=audit(1358433796.995:4558): pid=25948 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting mail file id=1007 exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/1 res=success'
>type=DEL_USER msg=audit(1358433796.995:4559): pid=25948 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting home directory id=1007 exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/1 res=success'
>type=DEL_GROUP msg=audit(1358433797.289:4560): pid=25955 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=removing group from /etc/group id=1010 exe="/usr/sbin/groupdel" hostname=? addr=? terminal=pts/1 res=success'
>type=DEL_GROUP msg=audit(1358433797.349:4561): pid=25955 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=removing group from /etc/gshadow id=1010 exe="/usr/sbin/groupdel" hostname=? addr=? terminal=pts/1 res=success'
>type=DEL_GROUP msg=audit(1358433797.351:4562): pid=25955 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op= id=1010 exe="/usr/sbin/groupdel" hostname=? addr=? terminal=pts/1 res=success'
>type=DEL_USER msg=audit(1358433797.359:4563): pid=25959 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting user not found acct="account_test_user" exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/1 res=failed'
>type=USER_AUTH msg=audit(1358433797.442:4564): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358433797.444:4565): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_AUTH msg=audit(1358433797.530:4566): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358433797.532:4567): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_AUTH msg=audit(1358433797.616:4568): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358433797.618:4569): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=AVC msg=audit(1358433797.667:4570): avc:  denied  { write } for  pid=25638 comm="cimprovagt" name="shadow-" dev="vda3" ino=58 scontext=system_u:system_r:pegasus_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file
>type=SYSCALL msg=audit(1358433797.667:4570): arch=c000003e syscall=2 success=yes exit=18 a0=7f94f001ec00 a1=41 a2=8000 a3=d items=0 ppid=1 pid=25638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cimprovagt" exe="/usr/libexec/pegasus/cimprovagt" subj=system_u:system_r:pegasus_t:s0 key=(null)
>type=AVC msg=audit(1358433797.675:4571): avc:  denied  { setattr } for  pid=25638 comm="cimprovagt" name="shadow-" dev="vda3" ino=58 scontext=system_u:system_r:pegasus_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file
>type=SYSCALL msg=audit(1358433797.675:4571): arch=c000003e syscall=93 success=yes exit=0 a0=12 a1=0 a2=0 a3=28 items=0 ppid=1 pid=25638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cimprovagt" exe="/usr/libexec/pegasus/cimprovagt" subj=system_u:system_r:pegasus_t:s0 key=(null)
>type=DEL_USER msg=audit(1358433797.929:4572): pid=25984 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting user entries id=777 exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/1 res=success'
>type=USER_AUTH msg=audit(1358433798.255:4573): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358433798.258:4574): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_AUTH msg=audit(1358433798.342:4575): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358433798.345:4576): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_AUTH msg=audit(1358433798.431:4577): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358433798.433:4578): pid=25479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=DEL_GROUP msg=audit(1358433798.587:4579): pid=26009 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=removing group from /etc/group id=666 exe="/usr/sbin/groupdel" hostname=? addr=? terminal=pts/1 res=success'
>type=DEL_GROUP msg=audit(1358433798.649:4580): pid=26009 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=removing group from /etc/gshadow id=666 exe="/usr/sbin/groupdel" hostname=? addr=? terminal=pts/1 res=success'
>type=DEL_GROUP msg=audit(1358433798.650:4581): pid=26009 uid=0 auid=1000 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op= id=666 exe="/usr/sbin/groupdel" hostname=? addr=? terminal=pts/1 res=success'

Actions: View

Attachments on bug 896624: 680328 | 680355 | 684235 | 685010 | 685017