Attachment 685010 Details for Bug 896624 – audit.log when applied suggested semodule

audit.log when applied suggested semodule

audit.log (text/plain), 61.57 KB, created by Roman Rakus on 2013-01-22 10:20:54 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Roman Rakus

Created: 2013-01-22 10:20:54 UTC

Size: 61.57 KB

patch

obsolete

>type=USER_AVC msg=audit(1358843923.392:5925): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc:  received setenforce notice (enforcing=0)  exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?'
>type=SERVICE_STOP msg=audit(1358843924.408:5926): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="tog-pegasus" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1358843924.450:5927): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="tog-pegasus" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=USER_AUTH msg=audit(1358843929.075:5928): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358843929.078:5929): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=AVC msg=audit(1358843929.082:5930): avc:  denied  { read } for  pid=4422 comm="cmpiLMI_Account" name="meminfo" dev="proc" ino=4026532026 scontext=system_u:system_r:pegasus_openlmi_account_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file
>type=AVC msg=audit(1358843929.082:5930): avc:  denied  { open } for  pid=4422 comm="cmpiLMI_Account" path="/proc/meminfo" dev="proc" ino=4026532026 scontext=system_u:system_r:pegasus_openlmi_account_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file
>type=SYSCALL msg=audit(1358843929.082:5930): arch=c000003e syscall=2 success=yes exit=3 a0=392ab7823b a1=80000 a2=1b6 a3=238 items=0 ppid=4421 pid=4422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cmpiLMI_Account" exe="/usr/bin/bash" subj=system_u:system_r:pegasus_openlmi_account_t:s0 key=(null)
>type=AVC msg=audit(1358843929.089:5931): avc:  denied  { getattr } for  pid=4422 comm="cmpiLMI_Account" path="/proc/meminfo" dev="proc" ino=4026532026 scontext=system_u:system_r:pegasus_openlmi_account_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file
>type=SYSCALL msg=audit(1358843929.089:5931): arch=c000003e syscall=5 success=yes exit=0 a0=3 a1=7ffff1b39df0 a2=7ffff1b39df0 a3=0 items=0 ppid=4421 pid=4422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cmpiLMI_Account" exe="/usr/bin/bash" subj=system_u:system_r:pegasus_openlmi_account_t:s0 key=(null)
>type=AVC msg=audit(1358843929.089:5932): avc:  denied  { getattr } for  pid=4422 comm="cmpiLMI_Account" path="/var/lib/Pegasus/cache/trace" dev="vda3" ino=170687 scontext=system_u:system_r:pegasus_openlmi_account_t:s0 tcontext=system_u:object_r:pegasus_data_t:s0 tclass=dir
>type=SYSCALL msg=audit(1358843929.089:5932): arch=c000003e syscall=4 success=yes exit=0 a0=17bcef0 a1=7ffff1b3beb0 a2=7ffff1b3beb0 a3=0 items=0 ppid=4421 pid=4422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cmpiLMI_Account" exe="/usr/bin/bash" subj=system_u:system_r:pegasus_openlmi_account_t:s0 key=(null)
>type=AVC msg=audit(1358843929.090:5933): avc:  denied  { read } for  pid=4422 comm="cmpiLMI_Account" name="passwd" dev="vda3" ino=38373 scontext=system_u:system_r:pegasus_openlmi_account_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file
>type=AVC msg=audit(1358843929.090:5933): avc:  denied  { open } for  pid=4422 comm="cmpiLMI_Account" path="/etc/passwd" dev="vda3" ino=38373 scontext=system_u:system_r:pegasus_openlmi_account_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file
>type=SYSCALL msg=audit(1358843929.090:5933): arch=c000003e syscall=2 success=yes exit=3 a0=7f6a726296ca a1=80000 a2=1b6 a3=238 items=0 ppid=4421 pid=4422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cmpiLMI_Account" exe="/usr/bin/bash" subj=system_u:system_r:pegasus_openlmi_account_t:s0 key=(null)
>type=AVC msg=audit(1358843929.093:5934): avc:  denied  { getattr } for  pid=4422 comm="cmpiLMI_Account" path="/etc/passwd" dev="vda3" ino=38373 scontext=system_u:system_r:pegasus_openlmi_account_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file
>type=SYSCALL msg=audit(1358843929.093:5934): arch=c000003e syscall=5 success=yes exit=0 a0=3 a1=7ffff1b3bd30 a2=7ffff1b3bd30 a3=0 items=0 ppid=4421 pid=4422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cmpiLMI_Account" exe="/usr/bin/bash" subj=system_u:system_r:pegasus_openlmi_account_t:s0 key=(null)
>type=AVC msg=audit(1358843929.094:5935): avc:  denied  { write } for  pid=4422 comm="cmpiLMI_Account" name="account.log" dev="tmpfs" ino=137198 scontext=system_u:system_r:pegasus_openlmi_account_t:s0 tcontext=system_u:object_r:pegasus_tmp_t:s0 tclass=file
>type=AVC msg=audit(1358843929.094:5935): avc:  denied  { open } for  pid=4422 comm="cmpiLMI_Account" path="/tmp/account.log" dev="tmpfs" ino=137198 scontext=system_u:system_r:pegasus_openlmi_account_t:s0 tcontext=system_u:object_r:pegasus_tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1358843929.094:5935): arch=c000003e syscall=2 success=yes exit=3 a0=17c2910 a1=241 a2=1b6 a3=0 items=0 ppid=4421 pid=4422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cmpiLMI_Account" exe="/usr/bin/bash" subj=system_u:system_r:pegasus_openlmi_account_t:s0 key=(null)
>type=AVC msg=audit(1358843929.094:5936): avc:  denied  { execute } for  pid=4425 comm="cmpiLMI_Account" name="cimprovagt" dev="vda3" ino=9010 scontext=system_u:system_r:pegasus_openlmi_account_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file
>type=AVC msg=audit(1358843929.094:5936): avc:  denied  { execute_no_trans } for  pid=4425 comm="cmpiLMI_Account" path="/usr/libexec/pegasus/cimprovagt" dev="vda3" ino=9010 scontext=system_u:system_r:pegasus_openlmi_account_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file
>type=SYSCALL msg=audit(1358843929.094:5936): arch=c000003e syscall=59 success=yes exit=0 a0=17c2c20 a1=17c0e00 a2=17c34f0 a3=38 items=0 ppid=4422 pid=4425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cimprovagt" exe="/usr/libexec/pegasus/cimprovagt" subj=system_u:system_r:pegasus_openlmi_account_t:s0 key=(null)
>type=AVC msg=audit(1358843929.104:5937): avc:  denied  { setgid } for  pid=4425 comm="cimprovagt" capability=6  scontext=system_u:system_r:pegasus_openlmi_account_t:s0 tcontext=system_u:system_r:pegasus_openlmi_account_t:s0 tclass=capability
>type=SYSCALL msg=audit(1358843929.104:5937): arch=c000003e syscall=106 success=yes exit=0 a0=0 a1=0 a2=3 a3=7fff227a8e90 items=0 ppid=4422 pid=4425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cimprovagt" exe="/usr/libexec/pegasus/cimprovagt" subj=system_u:system_r:pegasus_openlmi_account_t:s0 key=(null)
>type=AVC msg=audit(1358843929.105:5938): avc:  denied  { setuid } for  pid=4425 comm="cimprovagt" capability=7  scontext=system_u:system_r:pegasus_openlmi_account_t:s0 tcontext=system_u:system_r:pegasus_openlmi_account_t:s0 tclass=capability
>type=SYSCALL msg=audit(1358843929.105:5938): arch=c000003e syscall=105 success=yes exit=0 a0=0 a1=0 a2=1 a3=7fff227a8e90 items=0 ppid=4422 pid=4425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cimprovagt" exe="/usr/libexec/pegasus/cimprovagt" subj=system_u:system_r:pegasus_openlmi_account_t:s0 key=(null)
>type=AVC msg=audit(1358843929.119:5939): avc:  denied  { write } for  pid=4426 comm="cimprovagt" name="trace" dev="vda3" ino=170687 scontext=system_u:system_r:pegasus_openlmi_account_t:s0 tcontext=system_u:object_r:pegasus_data_t:s0 tclass=dir
>type=SYSCALL msg=audit(1358843929.119:5939): arch=c000003e syscall=21 success=yes exit=0 a0=7f04c65b21c0 a1=2 a2=7f04c2afe768 a3=7fff74f13e00 items=0 ppid=1 pid=4426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cimprovagt" exe="/usr/libexec/pegasus/cimprovagt" subj=system_u:system_r:pegasus_openlmi_account_t:s0 key=(null)
>type=AVC msg=audit(1358843929.206:5940): avc:  denied  { read } for  pid=4427 comm="cimprovagt" name="resolv.conf" dev="vda3" ino=8290 scontext=system_u:system_r:pegasus_openlmi_account_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file
>type=AVC msg=audit(1358843929.206:5940): avc:  denied  { open } for  pid=4427 comm="cimprovagt" path="/etc/resolv.conf" dev="vda3" ino=8290 scontext=system_u:system_r:pegasus_openlmi_account_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file
>type=SYSCALL msg=audit(1358843929.206:5940): arch=c000003e syscall=2 success=yes exit=3 a0=7f04c28c55ad a1=80000 a2=1b6 a3=238 items=0 ppid=1 pid=4427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cimprovagt" exe="/usr/libexec/pegasus/cimprovagt" subj=system_u:system_r:pegasus_openlmi_account_t:s0 key=(null)
>type=AVC msg=audit(1358843929.206:5941): avc:  denied  { getattr } for  pid=4427 comm="cimprovagt" path="/etc/resolv.conf" dev="vda3" ino=8290 scontext=system_u:system_r:pegasus_openlmi_account_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file
>type=SYSCALL msg=audit(1358843929.206:5941): arch=c000003e syscall=5 success=yes exit=0 a0=3 a1=7f04c5719680 a2=7f04c5719680 a3=0 items=0 ppid=1 pid=4427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cimprovagt" exe="/usr/libexec/pegasus/cimprovagt" subj=system_u:system_r:pegasus_openlmi_account_t:s0 key=(null)
>type=AVC msg=audit(1358843929.206:5942): avc:  denied  { create } for  pid=4427 comm="cimprovagt" scontext=system_u:system_r:pegasus_openlmi_account_t:s0 tcontext=system_u:system_r:pegasus_openlmi_account_t:s0 tclass=udp_socket
>type=SYSCALL msg=audit(1358843929.206:5942): arch=c000003e syscall=41 success=yes exit=3 a0=2 a1=802 a2=0 a3=7f04c5719680 items=0 ppid=1 pid=4427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cimprovagt" exe="/usr/libexec/pegasus/cimprovagt" subj=system_u:system_r:pegasus_openlmi_account_t:s0 key=(null)
>type=AVC msg=audit(1358843929.207:5943): avc:  denied  { connect } for  pid=4427 comm="cimprovagt" scontext=system_u:system_r:pegasus_openlmi_account_t:s0 tcontext=system_u:system_r:pegasus_openlmi_account_t:s0 tclass=udp_socket
>type=SYSCALL msg=audit(1358843929.207:5943): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7f04bc009260 a2=10 a3=7f04c5719680 items=0 ppid=1 pid=4427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cimprovagt" exe="/usr/libexec/pegasus/cimprovagt" subj=system_u:system_r:pegasus_openlmi_account_t:s0 key=(null)
>type=AVC msg=audit(1358843929.207:5944): avc:  denied  { getattr } for  pid=4427 comm="cimprovagt" path="socket:[183104]" dev="sockfs" ino=183104 scontext=system_u:system_r:pegasus_openlmi_account_t:s0 tcontext=system_u:system_r:pegasus_openlmi_account_t:s0 tclass=udp_socket
>type=SYSCALL msg=audit(1358843929.207:5944): arch=c000003e syscall=16 success=yes exit=0 a0=3 a1=541b a2=7f04c5719a20 a3=7f04c5719680 items=0 ppid=1 pid=4427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cimprovagt" exe="/usr/libexec/pegasus/cimprovagt" subj=system_u:system_r:pegasus_openlmi_account_t:s0 key=(null)
>type=AVC msg=audit(1358843929.238:5945): avc:  denied  { getattr } for  pid=4427 comm="cimprovagt" path="/etc/shadow" dev="vda3" ino=1233 scontext=system_u:system_r:pegasus_openlmi_account_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file
>type=SYSCALL msg=audit(1358843929.238:5945): arch=c000003e syscall=4 success=yes exit=0 a0=7f04bc0154e0 a1=7f04c571be40 a2=7f04c571be40 a3=c items=0 ppid=1 pid=4427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cimprovagt" exe="/usr/libexec/pegasus/cimprovagt" subj=system_u:system_r:pegasus_openlmi_account_t:s0 key=(null)
>type=AVC msg=audit(1358843929.238:5946): avc:  denied  { lock } for  pid=4427 comm="cimprovagt" path="/etc/passwd" dev="vda3" ino=38373 scontext=system_u:system_r:pegasus_openlmi_account_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file
>type=SYSCALL msg=audit(1358843929.238:5946): arch=c000003e syscall=72 success=yes exit=0 a0=3 a1=6 a2=7f04bc0166b8 a3=7f04c571bb30 items=0 ppid=1 pid=4427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cimprovagt" exe="/usr/libexec/pegasus/cimprovagt" subj=system_u:system_r:pegasus_openlmi_account_t:s0 key=(null)
>type=AVC msg=audit(1358843929.239:5947): avc:  denied  { dac_override } for  pid=4427 comm="cimprovagt" capability=1  scontext=system_u:system_r:pegasus_openlmi_account_t:s0 tcontext=system_u:system_r:pegasus_openlmi_account_t:s0 tclass=capability
>type=AVC msg=audit(1358843929.239:5947): avc:  denied  { read } for  pid=4427 comm="cimprovagt" name="shadow" dev="vda3" ino=1233 scontext=system_u:system_r:pegasus_openlmi_account_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file
>type=AVC msg=audit(1358843929.239:5947): avc:  denied  { open } for  pid=4427 comm="cimprovagt" path="/etc/shadow" dev="vda3" ino=1233 scontext=system_u:system_r:pegasus_openlmi_account_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file
>type=SYSCALL msg=audit(1358843929.239:5947): arch=c000003e syscall=2 success=yes exit=3 a0=7f04bc017ab0 a1=0 a2=7f04c571bdb0 a3=c items=0 ppid=1 pid=4427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cimprovagt" exe="/usr/libexec/pegasus/cimprovagt" subj=system_u:system_r:pegasus_openlmi_account_t:s0 key=(null)
>type=AVC msg=audit(1358843929.239:5948): avc:  denied  { lock } for  pid=4427 comm="cimprovagt" path="/etc/shadow" dev="vda3" ino=1233 scontext=system_u:system_r:pegasus_openlmi_account_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file
>type=SYSCALL msg=audit(1358843929.239:5948): arch=c000003e syscall=72 success=yes exit=0 a0=3 a1=6 a2=7f04bc0166b8 a3=28 items=0 ppid=1 pid=4427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cimprovagt" exe="/usr/libexec/pegasus/cimprovagt" subj=system_u:system_r:pegasus_openlmi_account_t:s0 key=(null)
>type=AVC msg=audit(1358843929.242:5949): avc:  denied  { read } for  pid=4427 comm="cimprovagt" name="wtmp" dev="vda3" ino=146104 scontext=system_u:system_r:pegasus_openlmi_account_t:s0 tcontext=system_u:object_r:wtmp_t:s0 tclass=file
>type=AVC msg=audit(1358843929.242:5949): avc:  denied  { open } for  pid=4427 comm="cimprovagt" path="/var/log/wtmp" dev="vda3" ino=146104 scontext=system_u:system_r:pegasus_openlmi_account_t:s0 tcontext=system_u:object_r:wtmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1358843929.242:5949): arch=c000003e syscall=2 success=yes exit=3 a0=7f04bc08a240 a1=80000 a2=7f04bc08a240 a3=7f04c571bd30 items=0 ppid=1 pid=4427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cimprovagt" exe="/usr/libexec/pegasus/cimprovagt" subj=system_u:system_r:pegasus_openlmi_account_t:s0 key=(null)
>type=DEL_USER msg=audit(1358843930.344:5950): pid=4464 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting user not found acct="account_test_user" exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/0 res=failed'
>type=USER_AUTH msg=audit(1358843930.463:5951): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358843930.469:5952): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_AUTH msg=audit(1358843930.644:5953): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358843930.650:5954): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_AUTH msg=audit(1358843930.776:5955): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358843930.781:5956): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=AVC msg=audit(1358843930.787:5957): avc:  denied  { search } for  pid=4427 comm="cimprovagt" name="tog-pegasus" dev="tmpfs" ino=12793 scontext=system_u:system_r:pegasus_openlmi_account_t:s0 tcontext=system_u:object_r:pegasus_var_run_t:s0 tclass=dir
>type=AVC msg=audit(1358843930.787:5957): avc:  denied  { write } for  pid=4427 comm="cimprovagt" name="cimxml.socket" dev="tmpfs" ino=183040 scontext=system_u:system_r:pegasus_openlmi_account_t:s0 tcontext=system_u:object_r:pegasus_var_run_t:s0 tclass=sock_file
>type=AVC msg=audit(1358843930.787:5957): avc:  denied  { connectto } for  pid=4427 comm="cimprovagt" path="/run/tog-pegasus/cimxml.socket" scontext=system_u:system_r:pegasus_openlmi_account_t:s0 tcontext=system_u:system_r:pegasus_t:s0 tclass=unix_stream_socket
>type=SYSCALL msg=audit(1358843930.787:5957): arch=c000003e syscall=42 success=yes exit=0 a0=5 a1=7f04c571b390 a2=6e a3=7f04c571ab10 items=0 ppid=1 pid=4427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cimprovagt" exe="/usr/libexec/pegasus/cimprovagt" subj=system_u:system_r:pegasus_openlmi_account_t:s0 key=(null)
>type=AVC msg=audit(1358843930.795:5958): avc:  denied  { read } for  pid=4427 comm="cimprovagt" name="cimclient_root_1_792" dev="vda3" ino=163600 scontext=system_u:system_r:pegasus_openlmi_account_t:s0 tcontext=system_u:object_r:pegasus_data_t:s0 tclass=file
>type=AVC msg=audit(1358843930.795:5958): avc:  denied  { open } for  pid=4427 comm="cimprovagt" path="/var/lib/Pegasus/cache/localauth/cimclient_root_1_792" dev="vda3" ino=163600 scontext=system_u:system_r:pegasus_openlmi_account_t:s0 tcontext=system_u:object_r:pegasus_data_t:s0 tclass=file
>type=SYSCALL msg=audit(1358843930.795:5958): arch=c000003e syscall=2 success=yes exit=6 a0=7f04bc067c60 a1=0 a2=1b6 a3=238 items=0 ppid=1 pid=4427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cimprovagt" exe="/usr/libexec/pegasus/cimprovagt" subj=system_u:system_r:pegasus_openlmi_account_t:s0 key=(null)
>type=AVC msg=audit(1358843930.867:5959): avc:  denied  { setfscreate } for  pid=4427 comm="cimprovagt" scontext=system_u:system_r:pegasus_openlmi_account_t:s0 tcontext=system_u:system_r:pegasus_openlmi_account_t:s0 tclass=process
>type=SYSCALL msg=audit(1358843930.867:5959): arch=c000003e syscall=1 success=yes exit=35 a0=a a1=7f04bc0679f0 a2=23 a3=7f04c571b3b0 items=0 ppid=1 pid=4427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cimprovagt" exe="/usr/libexec/pegasus/cimprovagt" subj=system_u:system_r:pegasus_openlmi_account_t:s0 key=(null)
>type=AVC msg=audit(1358843930.868:5960): avc:  denied  { write } for  pid=4427 comm="cimprovagt" name="group-" dev="vda3" ino=22898 scontext=system_u:system_r:pegasus_openlmi_account_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file
>type=SYSCALL msg=audit(1358843930.868:5960): arch=c000003e syscall=2 success=yes exit=12 a0=7f04bc023170 a1=41 a2=81a4 a3=c items=0 ppid=1 pid=4427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cimprovagt" exe="/usr/libexec/pegasus/cimprovagt" subj=system_u:system_r:pegasus_openlmi_account_t:s0 key=(null)
>type=AVC msg=audit(1358843930.868:5961): avc:  denied  { setattr } for  pid=4427 comm="cimprovagt" name="group-" dev="vda3" ino=22898 scontext=system_u:system_r:pegasus_openlmi_account_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file
>type=SYSCALL msg=audit(1358843930.868:5961): arch=c000003e syscall=93 success=yes exit=0 a0=c a1=0 a2=0 a3=28 items=0 ppid=1 pid=4427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cimprovagt" exe="/usr/libexec/pegasus/cimprovagt" subj=system_u:system_r:pegasus_openlmi_account_t:s0 key=(null)
>type=AVC msg=audit(1358843930.907:5962): avc:  denied  { write } for  pid=4427 comm="cimprovagt" name="gshadow-" dev="vda3" ino=50 scontext=system_u:system_r:pegasus_openlmi_account_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file
>type=SYSCALL msg=audit(1358843930.907:5962): arch=c000003e syscall=2 success=yes exit=12 a0=7f04bc0230d0 a1=41 a2=8000 a3=e items=0 ppid=1 pid=4427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cimprovagt" exe="/usr/libexec/pegasus/cimprovagt" subj=system_u:system_r:pegasus_openlmi_account_t:s0 key=(null)
>type=AVC msg=audit(1358843930.908:5963): avc:  denied  { setattr } for  pid=4427 comm="cimprovagt" name="gshadow-" dev="vda3" ino=50 scontext=system_u:system_r:pegasus_openlmi_account_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file
>type=SYSCALL msg=audit(1358843930.908:5963): arch=c000003e syscall=93 success=yes exit=0 a0=c a1=0 a2=0 a3=28 items=0 ppid=1 pid=4427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cimprovagt" exe="/usr/libexec/pegasus/cimprovagt" subj=system_u:system_r:pegasus_openlmi_account_t:s0 key=(null)
>type=AVC msg=audit(1358843931.019:5964): avc:  denied  { write } for  pid=4427 comm="cimprovagt" name="home" dev="vda3" ino=129321 scontext=system_u:system_r:pegasus_openlmi_account_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir
>type=AVC msg=audit(1358843931.019:5964): avc:  denied  { add_name } for  pid=4427 comm="cimprovagt" name="account_test_user" scontext=system_u:system_r:pegasus_openlmi_account_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir
>type=AVC msg=audit(1358843931.019:5964): avc:  denied  { create } for  pid=4427 comm="cimprovagt" name="account_test_user" scontext=system_u:system_r:pegasus_openlmi_account_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1358843931.019:5964): arch=c000003e syscall=83 success=yes exit=0 a0=7f04bc030550 a1=1c0 a2=0 a3=7f04c571b6d0 items=0 ppid=1 pid=4427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cimprovagt" exe="/usr/libexec/pegasus/cimprovagt" subj=system_u:system_r:pegasus_openlmi_account_t:s0 key=(null)
>type=AVC msg=audit(1358843931.020:5965): avc:  denied  { setattr } for  pid=4427 comm="cimprovagt" name="account_test_user" dev="vda3" ino=210108 scontext=system_u:system_r:pegasus_openlmi_account_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir
>type=AVC msg=audit(1358843931.020:5965): avc:  denied  { chown } for  pid=4427 comm="cimprovagt" capability=0  scontext=system_u:system_r:pegasus_openlmi_account_t:s0 tcontext=system_u:system_r:pegasus_openlmi_account_t:s0 tclass=capability
>type=SYSCALL msg=audit(1358843931.020:5965): arch=c000003e syscall=92 success=yes exit=0 a0=7f04bc030550 a1=3ed a2=3e9 a3=7f04c571b6d0 items=0 ppid=1 pid=4427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cimprovagt" exe="/usr/libexec/pegasus/cimprovagt" subj=system_u:system_r:pegasus_openlmi_account_t:s0 key=(null)
>type=DEL_USER msg=audit(1358843931.101:5966): pid=4515 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting user entries id=1005 exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/0 res=success'
>type=DEL_GROUP msg=audit(1358843931.102:5967): pid=4515 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting group acct="account_test_user" exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/0 res=success'
>type=DEL_GROUP msg=audit(1358843931.103:5968): pid=4515 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting shadow group acct="account_test_user" exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/0 res=success'
>type=AVC msg=audit(1358843931.103:5969): avc:  denied  { rmdir } for  pid=4515 comm="userdel" name="account_test_user" dev="vda3" ino=210108 scontext=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1358843931.103:5969): arch=c000003e syscall=84 success=yes exit=0 a0=7fd1ce0805e0 a1=0 a2=6700 a3=8028 items=0 ppid=4417 pid=4515 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=20 comm="userdel" exe="/usr/sbin/userdel" subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 key=(null)
>type=DEL_USER msg=audit(1358843931.104:5970): pid=4515 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting home directory id=1005 exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/0 res=success'
>type=DEL_USER msg=audit(1358843931.351:5971): pid=4536 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting user not found acct="account_test_user" exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/0 res=failed'
>type=ADD_GROUP msg=audit(1358843931.371:5972): pid=4539 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=adding group acct="account_test_user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=pts/0 res=success'
>type=ADD_USER msg=audit(1358843931.421:5973): pid=4539 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=1007 exe="/usr/sbin/useradd" hostname=? addr=? terminal=pts/0 res=success'
>type=ADD_USER msg=audit(1358843931.424:5974): pid=4539 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=adding home directory id=1007 exe="/usr/sbin/useradd" hostname=? addr=? terminal=pts/0 res=success'
>type=USER_AUTH msg=audit(1358843931.736:5975): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358843931.739:5976): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_AUTH msg=audit(1358843931.864:5977): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358843931.867:5978): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=DEL_USER msg=audit(1358843931.961:5979): pid=4559 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting user not found acct="account_test_user" exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/0 res=failed'
>type=DEL_GROUP msg=audit(1358843932.023:5980): pid=4560 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=removing group from /etc/group id=1007 exe="/usr/sbin/groupdel" hostname=? addr=? terminal=pts/0 res=success'
>type=DEL_GROUP msg=audit(1358843932.083:5981): pid=4560 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=removing group from /etc/gshadow id=1007 exe="/usr/sbin/groupdel" hostname=? addr=? terminal=pts/0 res=success'
>type=DEL_GROUP msg=audit(1358843932.085:5982): pid=4560 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op= id=1007 exe="/usr/sbin/groupdel" hostname=? addr=? terminal=pts/0 res=success'
>type=DEL_USER msg=audit(1358843932.094:5983): pid=4565 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting user not found acct="account_test_user" exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/0 res=failed'
>type=ADD_GROUP msg=audit(1358843932.112:5984): pid=4568 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=adding group acct="account_test_user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=pts/0 res=success'
>type=ADD_USER msg=audit(1358843932.160:5985): pid=4568 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=1007 exe="/usr/sbin/useradd" hostname=? addr=? terminal=pts/0 res=success'
>type=ADD_USER msg=audit(1358843932.165:5986): pid=4568 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=adding home directory id=1007 exe="/usr/sbin/useradd" hostname=? addr=? terminal=pts/0 res=success'
>type=USER_AUTH msg=audit(1358843932.487:5987): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358843932.490:5988): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=AVC msg=audit(1358843932.492:5989): avc:  denied  { read } for  pid=4427 comm="cimprovagt" name="passwd" dev="vda3" ino=48314 scontext=system_u:system_r:pegasus_openlmi_account_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file
>type=AVC msg=audit(1358843932.492:5989): avc:  denied  { open } for  pid=4427 comm="cimprovagt" path="/etc/passwd" dev="vda3" ino=48314 scontext=system_u:system_r:pegasus_openlmi_account_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file
>type=SYSCALL msg=audit(1358843932.492:5989): arch=c000003e syscall=2 success=yes exit=10 a0=7f04bc016210 a1=0 a2=7f04c571bdb0 a3=c items=0 ppid=1 pid=4427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cimprovagt" exe="/usr/libexec/pegasus/cimprovagt" subj=system_u:system_r:pegasus_openlmi_account_t:s0 key=(null)
>type=AVC msg=audit(1358843932.499:5990): avc:  denied  { lock } for  pid=4427 comm="cimprovagt" path="/etc/passwd" dev="vda3" ino=48314 scontext=system_u:system_r:pegasus_openlmi_account_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file
>type=SYSCALL msg=audit(1358843932.499:5990): arch=c000003e syscall=72 success=yes exit=0 a0=a a1=6 a2=7f04bc016008 a3=28 items=0 ppid=1 pid=4427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cimprovagt" exe="/usr/libexec/pegasus/cimprovagt" subj=system_u:system_r:pegasus_openlmi_account_t:s0 key=(null)
>type=AVC msg=audit(1358843932.499:5991): avc:  denied  { getattr } for  pid=4427 comm="cimprovagt" path="/etc/passwd" dev="vda3" ino=48314 scontext=system_u:system_r:pegasus_openlmi_account_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file
>type=SYSCALL msg=audit(1358843932.499:5991): arch=c000003e syscall=5 success=yes exit=0 a0=a a1=7f04c571bbf0 a2=7f04c571bbf0 a3=238 items=0 ppid=1 pid=4427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cimprovagt" exe="/usr/libexec/pegasus/cimprovagt" subj=system_u:system_r:pegasus_openlmi_account_t:s0 key=(null)
>type=USER_AUTH msg=audit(1358843932.711:5992): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358843932.713:5993): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=AVC msg=audit(1358843932.716:5994): avc:  denied  { write } for  pid=4427 comm="cimprovagt" name="passwd-" dev="vda3" ino=22906 scontext=system_u:system_r:pegasus_openlmi_account_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file
>type=SYSCALL msg=audit(1358843932.716:5994): arch=c000003e syscall=2 success=yes exit=12 a0=7f04bc014cf0 a1=41 a2=81a4 a3=d items=0 ppid=1 pid=4427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cimprovagt" exe="/usr/libexec/pegasus/cimprovagt" subj=system_u:system_r:pegasus_openlmi_account_t:s0 key=(null)
>type=AVC msg=audit(1358843932.720:5995): avc:  denied  { setattr } for  pid=4427 comm="cimprovagt" name="passwd-" dev="vda3" ino=22906 scontext=system_u:system_r:pegasus_openlmi_account_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file
>type=SYSCALL msg=audit(1358843932.720:5995): arch=c000003e syscall=93 success=yes exit=0 a0=c a1=0 a2=0 a3=28 items=0 ppid=1 pid=4427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cimprovagt" exe="/usr/libexec/pegasus/cimprovagt" subj=system_u:system_r:pegasus_openlmi_account_t:s0 key=(null)
>type=USER_AUTH msg=audit(1358843932.878:5996): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358843932.880:5997): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_AUTH msg=audit(1358843933.042:5998): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358843933.044:5999): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=DEL_USER msg=audit(1358843933.272:6000): pid=4597 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting user entries id=1007 exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/0 res=success'
>type=DEL_GROUP msg=audit(1358843933.273:6001): pid=4597 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting group acct="account_test_user" exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/0 res=success'
>type=DEL_GROUP msg=audit(1358843933.274:6002): pid=4597 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting shadow group acct="account_test_user" exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/0 res=success'
>type=DEL_USER msg=audit(1358843933.274:6003): pid=4597 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting mail file id=1007 exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/0 res=success'
>type=DEL_USER msg=audit(1358843933.274:6004): pid=4597 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting home directory id=1007 exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/0 res=success'
>type=USER_AUTH msg=audit(1358843933.601:6005): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358843933.604:6006): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_AUTH msg=audit(1358843933.687:6007): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358843933.690:6008): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_AUTH msg=audit(1358843933.769:6009): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358843933.771:6010): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=AVC msg=audit(1358843933.776:6011): avc:  denied  { setfscreate } for  pid=4427 comm="cimprovagt" scontext=system_u:system_r:pegasus_openlmi_account_t:s0 tcontext=system_u:system_r:pegasus_openlmi_account_t:s0 tclass=process
>type=SYSCALL msg=audit(1358843933.776:6011): arch=c000003e syscall=1 success=yes exit=35 a0=a a1=7f04bc037ce0 a2=23 a3=6165726373662f72 items=0 ppid=1 pid=4427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cimprovagt" exe="/usr/libexec/pegasus/cimprovagt" subj=system_u:system_r:pegasus_openlmi_account_t:s0 key=(null)
>type=DEL_GROUP msg=audit(1358843933.934:6012): pid=4616 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=removing group from /etc/group id=1001 exe="/usr/sbin/groupdel" hostname=? addr=? terminal=pts/0 res=success'
>type=DEL_GROUP msg=audit(1358843934.002:6013): pid=4616 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=removing group from /etc/gshadow id=1001 exe="/usr/sbin/groupdel" hostname=? addr=? terminal=pts/0 res=success'
>type=DEL_GROUP msg=audit(1358843934.004:6014): pid=4616 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op= id=1001 exe="/usr/sbin/groupdel" hostname=? addr=? terminal=pts/0 res=success'
>type=ADD_GROUP msg=audit(1358843934.087:6015): pid=4621 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=1010 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=pts/0 res=success'
>type=ADD_GROUP msg=audit(1358843934.197:6016): pid=4621 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=1010 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=pts/0 res=success'
>type=ADD_GROUP msg=audit(1358843934.199:6017): pid=4621 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op= id=1010 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=pts/0 res=success'
>type=USER_AUTH msg=audit(1358843934.278:6018): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358843934.280:6019): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=AVC msg=audit(1358843934.282:6020): avc:  denied  { dac_override } for  pid=4427 comm="cimprovagt" capability=1  scontext=system_u:system_r:pegasus_openlmi_account_t:s0 tcontext=system_u:system_r:pegasus_openlmi_account_t:s0 tclass=capability
>type=SYSCALL msg=audit(1358843934.282:6020): arch=c000003e syscall=2 success=yes exit=10 a0=7f04bc037230 a1=0 a2=7f04c571c220 a3=d items=0 ppid=1 pid=4427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cimprovagt" exe="/usr/libexec/pegasus/cimprovagt" subj=system_u:system_r:pegasus_openlmi_account_t:s0 key=(null)
>type=USER_AUTH msg=audit(1358843934.384:6021): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358843934.386:6022): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_AUTH msg=audit(1358843934.534:6023): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358843934.536:6024): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=DEL_USER msg=audit(1358843934.782:6025): pid=4637 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting user not found acct="account_test_user" exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/0 res=failed'
>type=ADD_GROUP msg=audit(1358843934.793:6026): pid=4640 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=adding group acct="account_test_user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=pts/0 res=success'
>type=ADD_USER msg=audit(1358843934.833:6027): pid=4640 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=1007 exe="/usr/sbin/useradd" hostname=? addr=? terminal=pts/0 res=success'
>type=ADD_USER msg=audit(1358843934.841:6028): pid=4640 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=adding home directory id=1007 exe="/usr/sbin/useradd" hostname=? addr=? terminal=pts/0 res=success'
>type=ADD_GROUP msg=audit(1358843935.166:6029): pid=4646 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=1010 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=pts/0 res=success'
>type=ADD_GROUP msg=audit(1358843935.227:6030): pid=4646 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=1010 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=pts/0 res=success'
>type=ADD_GROUP msg=audit(1358843935.229:6031): pid=4646 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op= id=1010 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=pts/0 res=success'
>type=USER_AUTH msg=audit(1358843935.308:6032): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358843935.310:6033): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_AUTH msg=audit(1358843935.438:6034): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358843935.440:6035): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_AUTH msg=audit(1358843935.530:6036): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358843935.533:6037): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=AVC msg=audit(1358843935.543:6038): avc:  denied  { write } for  pid=4427 comm="cimprovagt" name="cimxml.socket" dev="tmpfs" ino=183040 scontext=system_u:system_r:pegasus_openlmi_account_t:s0 tcontext=system_u:object_r:pegasus_var_run_t:s0 tclass=sock_file
>type=AVC msg=audit(1358843935.543:6038): avc:  denied  { connectto } for  pid=4427 comm="cimprovagt" path="/run/tog-pegasus/cimxml.socket" scontext=system_u:system_r:pegasus_openlmi_account_t:s0 tcontext=system_u:system_r:pegasus_t:s0 tclass=unix_stream_socket
>type=SYSCALL msg=audit(1358843935.543:6038): arch=c000003e syscall=42 success=yes exit=0 a0=d a1=7f04c571b710 a2=6e a3=20 items=0 ppid=1 pid=4427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cimprovagt" exe="/usr/libexec/pegasus/cimprovagt" subj=system_u:system_r:pegasus_openlmi_account_t:s0 key=(null)
>type=DEL_USER msg=audit(1358843935.649:6039): pid=4663 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting user entries id=1007 exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/0 res=success'
>type=DEL_GROUP msg=audit(1358843935.649:6040): pid=4663 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting group acct="account_test_user" exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/0 res=success'
>type=DEL_GROUP msg=audit(1358843935.650:6041): pid=4663 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting shadow group acct="account_test_user" exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/0 res=success'
>type=DEL_USER msg=audit(1358843935.651:6042): pid=4663 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting mail file id=1007 exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/0 res=success'
>type=DEL_USER msg=audit(1358843935.651:6043): pid=4663 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting home directory id=1007 exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/0 res=success'
>type=DEL_GROUP msg=audit(1358843935.955:6044): pid=4670 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=removing group from /etc/group id=1010 exe="/usr/sbin/groupdel" hostname=? addr=? terminal=pts/0 res=success'
>type=DEL_GROUP msg=audit(1358843936.031:6045): pid=4670 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=removing group from /etc/gshadow id=1010 exe="/usr/sbin/groupdel" hostname=? addr=? terminal=pts/0 res=success'
>type=DEL_GROUP msg=audit(1358843936.033:6046): pid=4670 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op= id=1010 exe="/usr/sbin/groupdel" hostname=? addr=? terminal=pts/0 res=success'
>type=DEL_USER msg=audit(1358843936.043:6047): pid=4674 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting user not found acct="account_test_user" exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/0 res=failed'
>type=ADD_GROUP msg=audit(1358843936.055:6048): pid=4677 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=adding group acct="account_test_user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=pts/0 res=success'
>type=ADD_USER msg=audit(1358843936.100:6049): pid=4677 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=1007 exe="/usr/sbin/useradd" hostname=? addr=? terminal=pts/0 res=success'
>type=ADD_USER msg=audit(1358843936.104:6050): pid=4677 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=adding home directory id=1007 exe="/usr/sbin/useradd" hostname=? addr=? terminal=pts/0 res=success'
>type=USER_AUTH msg=audit(1358843936.415:6051): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358843936.418:6052): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_AUTH msg=audit(1358843936.546:6053): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358843936.548:6054): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=DEL_USER msg=audit(1358843936.637:6055): pid=4689 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting user not found acct="account_test_user" exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/0 res=failed'
>type=DEL_GROUP msg=audit(1358843936.710:6056): pid=4690 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=removing group from /etc/group id=1007 exe="/usr/sbin/groupdel" hostname=? addr=? terminal=pts/0 res=success'
>type=DEL_GROUP msg=audit(1358843936.770:6057): pid=4690 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=removing group from /etc/gshadow id=1007 exe="/usr/sbin/groupdel" hostname=? addr=? terminal=pts/0 res=success'
>type=DEL_GROUP msg=audit(1358843936.772:6058): pid=4690 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op= id=1007 exe="/usr/sbin/groupdel" hostname=? addr=? terminal=pts/0 res=success'
>type=DEL_USER msg=audit(1358843936.786:6059): pid=4695 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting user not found acct="account_test_user" exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/0 res=failed'
>type=ADD_GROUP msg=audit(1358843936.797:6060): pid=4698 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=adding group acct="account_test_user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=pts/0 res=success'
>type=ADD_USER msg=audit(1358843936.838:6061): pid=4698 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=1007 exe="/usr/sbin/useradd" hostname=? addr=? terminal=pts/0 res=success'
>type=ADD_USER msg=audit(1358843936.843:6062): pid=4698 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=adding home directory id=1007 exe="/usr/sbin/useradd" hostname=? addr=? terminal=pts/0 res=success'
>type=ADD_GROUP msg=audit(1358843937.155:6063): pid=4704 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=1010 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=pts/0 res=success'
>type=ADD_GROUP msg=audit(1358843937.214:6064): pid=4704 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=1010 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=pts/0 res=success'
>type=ADD_GROUP msg=audit(1358843937.216:6065): pid=4704 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op= id=1010 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=pts/0 res=success'
>type=USER_CHAUTHTOK msg=audit(1358843937.222:6066): pid=4708 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user to group acct="account_test_user" exe="/usr/sbin/usermod" hostname=? addr=? terminal=pts/0 res=success'
>type=USER_CHAUTHTOK msg=audit(1358843937.222:6067): pid=4708 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user to shadow group acct="account_test_user" exe="/usr/sbin/usermod" hostname=? addr=? terminal=pts/0 res=success'
>type=USER_AUTH msg=audit(1358843937.433:6068): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358843937.435:6069): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_AUTH msg=audit(1358843937.558:6070): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358843937.560:6071): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_AUTH msg=audit(1358843937.644:6072): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358843937.646:6073): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=DEL_USER msg=audit(1358843937.722:6074): pid=4723 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting user entries id=1007 exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/0 res=success'
>type=DEL_USER msg=audit(1358843937.723:6075): pid=4723 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting user from group id=1007 exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/0 res=success'
>type=DEL_GROUP msg=audit(1358843937.723:6076): pid=4723 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting group acct="account_test_user" exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/0 res=success'
>type=DEL_GROUP msg=audit(1358843937.724:6077): pid=4723 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting shadow group acct="account_test_user" exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/0 res=success'
>type=DEL_USER msg=audit(1358843937.724:6078): pid=4723 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting user from shadow group id=1007 exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/0 res=success'
>type=DEL_USER msg=audit(1358843937.725:6079): pid=4723 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting mail file id=1007 exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/0 res=success'
>type=DEL_USER msg=audit(1358843937.725:6080): pid=4723 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting home directory id=1007 exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/0 res=success'
>type=DEL_GROUP msg=audit(1358843938.029:6081): pid=4730 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=removing group from /etc/group id=1010 exe="/usr/sbin/groupdel" hostname=? addr=? terminal=pts/0 res=success'
>type=DEL_GROUP msg=audit(1358843938.089:6082): pid=4730 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=removing group from /etc/gshadow id=1010 exe="/usr/sbin/groupdel" hostname=? addr=? terminal=pts/0 res=success'
>type=DEL_GROUP msg=audit(1358843938.090:6083): pid=4730 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op= id=1010 exe="/usr/sbin/groupdel" hostname=? addr=? terminal=pts/0 res=success'
>type=DEL_USER msg=audit(1358843938.096:6084): pid=4734 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting user not found acct="account_test_user" exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/0 res=failed'
>type=USER_AUTH msg=audit(1358843938.174:6085): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358843938.176:6086): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_AUTH msg=audit(1358843938.256:6087): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358843938.258:6088): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_AUTH msg=audit(1358843938.339:6089): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358843938.341:6090): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=DEL_USER msg=audit(1358843938.574:6091): pid=4747 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting user entries id=777 exe="/usr/sbin/userdel" hostname=? addr=? terminal=pts/0 res=success'
>type=USER_AUTH msg=audit(1358843939.096:6092): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358843939.098:6093): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_AUTH msg=audit(1358843939.178:6094): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358843939.180:6095): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_AUTH msg=audit(1358843939.260:6096): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:authentication acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=USER_ACCT msg=audit(1358843939.262:6097): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:pegasus_t:s0 msg='op=PAM:accounting acct="pegasus" exe="/usr/sbin/cimserver" hostname=? addr=? terminal=wbemLocal res=success'
>type=DEL_GROUP msg=audit(1358843939.432:6098): pid=4764 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=removing group from /etc/group id=666 exe="/usr/sbin/groupdel" hostname=? addr=? terminal=pts/0 res=success'
>type=DEL_GROUP msg=audit(1358843939.492:6099): pid=4764 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=removing group from /etc/gshadow id=666 exe="/usr/sbin/groupdel" hostname=? addr=? terminal=pts/0 res=success'
>type=DEL_GROUP msg=audit(1358843939.493:6100): pid=4764 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op= id=666 exe="/usr/sbin/groupdel" hostname=? addr=? terminal=pts/0 res=success'
>type=ANOM_ABEND msg=audit(1358844939.517:6101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:pegasus_openlmi_account_t:s0 pid=4501 comm="cimprovagt" reason="memory violation" sig=11
>type=USER_ACCT msg=audit(1358845261.926:6102): pid=4818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1358845261.934:6103): pid=4818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1358845261.935:6104): login pid=4818 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=172
>type=USER_START msg=audit(1358845261.992:6105): pid=4818 uid=0 auid=0 ses=172 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_REFR msg=audit(1358845261.992:6106): pid=4818 uid=0 auid=0 ses=172 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1358845262.135:6107): pid=4818 uid=0 auid=0 ses=172 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1358845262.145:6108): pid=4818 uid=0 auid=0 ses=172 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'

Actions: View

Attachments on bug 896624: 680328 | 680355 | 684235 | 685010 | 685017