Login
[x]
Log in using an account from:
Fedora Account System
Red Hat Associate
Red Hat Customer
Or login using a Red Hat Bugzilla account
Forgot Password
Login:
Hide Forgot
Create an Account
Red Hat Bugzilla – Attachment 834319 Details for
Bug 1039563
oVirt node 3.0.3-1.1 refuses ssh connections due to selinux
[?]
New
Simple Search
Advanced Search
My Links
Browse
Requests
Reports
Current State
Search
Tabular reports
Graphical reports
Duplicates
Other Reports
User Changes
Plotly Reports
Bug Status
Bug Severity
Non-Defaults
|
Product Dashboard
Help
Page Help!
Bug Writing Guidelines
What's new
Browser Support Policy
5.0.4.rh83 Release notes
FAQ
Guides index
User guide
Web Services
Contact
Legal
This site requires JavaScript to be enabled to function correctly, please enable it.
audit.log
audit.log (text/plain), 262.60 KB, created by
Henrik
on 2013-12-09 13:10:20 UTC
(
hide
)
Description:
audit.log
Filename:
MIME Type:
Creator:
Henrik
Created:
2013-12-09 13:10:20 UTC
Size:
262.60 KB
patch
obsolete
>type=DAEMON_START msg=audit(1386575342.204:9937): auditd start, ver=2.3.2 format=raw kernel=3.11.9-200.fc19.x86_64 auid=4294967295 pid=1645 subj=system_u:system_r:initrc_t:s0 res=success >type=SERVICE_START msg=audit(1386575342.653:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="wdmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386575342.653:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sanlock" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386575342.658:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="avahi-daemon" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386575342.659:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-logind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1386575342.684:10): table=filter family=2 entries=4 >type=SERVICE_START msg=audit(1386575342.765:11): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="iptables" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386575342.775:12): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="network" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386575342.778:13): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="collectd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386575343.337:14): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="netconsole" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386575343.441:15): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rpcbind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386575343.837:16): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="iscsid" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386575343.839:17): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="libvirtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386575344.669:18): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nfs-lock" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386575344.738:19): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="anyterm" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386575345.909:20): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="glusterd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386575345.925:21): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="glusterfsd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1386575349.199:22): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsm-restore-net-config" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386575350.113:23): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="tuned" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1386575352.044:24): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1386575352.044:24): arch=c000003e syscall=313 success=yes exit=0 a0=0 a1=7f799d250969 a2=0 a3=0 items=0 ppid=1910 pid=1911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:insmod_t:s0 key=(null) >type=SERVICE_STOP msg=audit(1386575353.419:25): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="network" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386575353.426:26): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="network" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=DAEMON_END msg=audit(1386575353.834:9938): auditd normal halt, sending auid=0 pid=1963 subj=system_u:system_r:ovirt_t:s0 res=success >type=DAEMON_START msg=audit(1386575354.816:4475): auditd start, ver=2.3.2 format=raw kernel=3.11.9-200.fc19.x86_64 auid=4294967295 pid=1990 subj=system_u:system_r:initrc_t:s0 res=success >type=USER_CHAUTHTOK msg=audit(1386575355.777:36): pid=2276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:ovirt_t:s0 msg='op=display aging info id=0 exe="/usr/bin/chage" hostname=? addr=? terminal=? res=success' >type=USER_CHAUTHTOK msg=audit(1386575355.781:37): pid=2278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:ovirt_t:s0 msg='op=display aging info id=1000 exe="/usr/bin/chage" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386575358.112:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="ovirt-early" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386575358.118:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rsyslog" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386575358.183:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="ovirt-kdump" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386575359.913:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sshd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386575361.950:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=FS_RELABEL msg=audit(1386575363.446:43): pid=2420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:ovirt_t:s0 msg='op=mass relabel exe="/usr/sbin/setfiles" hostname=? addr=? terminal=tty1 res=success' >type=USER_CMD msg=audit(1386575363.657:44): pid=2536 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6370202F746D702F746D70395367467A58202F6574632F6D756C7469706174682E636F6E66 terminal=? res=success' >type=CRED_ACQ msg=audit(1386575363.659:45): pid=2536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1386575363.661:46): pid=2536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1386575363.663:47): pid=2536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1386575363.664:48): pid=2536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1386575363.678:49): pid=2542 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F70657273697374202F6574632F6D756C7469706174682E636F6E66 terminal=? res=success' >type=CRED_ACQ msg=audit(1386575363.679:50): pid=2542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1386575363.679:51): pid=2542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1386575363.706:52): pid=2542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1386575363.706:53): pid=2542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1386575363.719:54): pid=2552 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7362696E2F6D756C746970617468202D46 terminal=? res=success' >type=CRED_ACQ msg=audit(1386575363.720:55): pid=2552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1386575363.720:56): pid=2552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1386575363.818:57): pid=2552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1386575363.819:58): pid=2552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1386575363.836:59): pid=2567 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F7664736D2D746F6F6C20736572766963652D72656C6F6164206D756C74697061746864 terminal=? res=success' >type=CRED_ACQ msg=audit(1386575363.836:60): pid=2567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1386575363.836:61): pid=2567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1386575365.749:62): pid=2567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1386575365.749:63): pid=2567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1386575365.767:64): pid=2625 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7362696E2F6C766D2064756D70636F6E66696720676C6F62616C2F6C6F636B696E675F74797065 terminal=? res=success' >type=CRED_ACQ msg=audit(1386575365.768:65): pid=2625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1386575365.768:66): pid=2625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1386575365.805:67): pid=2625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1386575365.805:68): pid=2625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1386575365.861:69): pid=2631 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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termi' >type=CRED_ACQ msg=audit(1386575365.861:70): pid=2631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1386575365.861:71): pid=2631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1386575365.953:72): pid=2631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1386575365.953:73): pid=2631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1386575365.994:74): pid=2646 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303862313030316366663837366261646533366365346431366536637C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F' >type=CRED_ACQ msg=audit(1386575365.994:75): pid=2646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1386575365.994:76): pid=2646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1386575366.028:77): pid=2646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1386575366.028:78): pid=2646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1386575366.059:79): pid=2649 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7362696E2F6C766D206C7673202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303862313030316366663837366261646533366365346431366536637C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C76675F6E616D652C617474722C73697A652C7365675F73746172745F70652C646576696365732C74616773 terminal=? res=success' >type=CRED_ACQ msg=audit(1386575366.059:80): pid=2649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1386575366.060:81): pid=2649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1386575366.087:82): pid=2649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1386575366.087:83): pid=2649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1386575366.120:84): pid=2652 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1386575366.121:85): pid=2652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1386575366.121:86): pid=2652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1386575366.470:87): pid=2652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1386575366.470:88): pid=2652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386575366.599:89): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="polkit" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1386575368.509:90): pid=3076 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1386575368.509:91): pid=3076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1386575368.510:92): pid=3076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1386575368.577:93): pid=3076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1386575368.577:94): pid=3076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386575375.019:95): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="ntpdate" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1386575375.028:96): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="crond" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386575375.154:97): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="ntpd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386575391.090:98): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-localed" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1386575401.776:99): pid=5410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1386575401.776:100): pid=5411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386575401.776:101): pid=5410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386575401.776:102): pid=5411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386575401.778:103): login pid=5410 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1 >type=LOGIN msg=audit(1386575401.778:104): login pid=5411 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2 >type=USER_START msg=audit(1386575401.794:105): pid=5411 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_START msg=audit(1386575401.795:106): pid=5410 uid=0 auid=0 ses=1 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386575401.795:107): pid=5411 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386575401.795:108): pid=5410 uid=0 auid=0 ses=1 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386575401.818:109): pid=5410 uid=0 auid=0 ses=1 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386575401.820:110): pid=5410 uid=0 auid=0 ses=1 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386575401.843:111): pid=5411 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386575401.845:112): pid=5411 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=DAEMON_END msg=audit(1386575422.610:4476): auditd normal halt, sending auid=0 pid=6609 subj=system_u:system_r:ovirt_t:s0 res=success >type=DAEMON_START msg=audit(1386575654.054:583): auditd start, ver=2.3.2 format=raw kernel=3.11.9-200.fc19.x86_64 auid=4294967295 pid=1995 subj=system_u:system_r:initrc_t:s0 res=success >type=USER_CHAUTHTOK msg=audit(1386575654.977:34): pid=2299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:ovirt_t:s0 msg='op=display aging info id=0 exe="/usr/bin/chage" hostname=? addr=? terminal=? res=success' >type=USER_CHAUTHTOK msg=audit(1386575654.979:35): pid=2301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:ovirt_t:s0 msg='op=display aging info id=1000 exe="/usr/bin/chage" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386575655.787:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="ovirt-early" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386575655.790:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rsyslog" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386575655.864:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="ovirt-firstboot" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386575655.864:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="ovirt-kdump" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386575655.914:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="ovirt-awake" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386575655.968:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="ovirt" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386575656.009:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sshd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386575660.532:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386575660.556:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-journald" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386575660.556:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-journald" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386575660.557:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-journald" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386575660.567:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-journal-flush" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386575660.567:48): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-journal-flush" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386575660.770:49): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="network" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386575660.770:50): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="network" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386575660.785:51): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="network" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386575661.035:52): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="ovirt-post" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386575661.038:53): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1386575661.953:54): pid=2695 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6370202F746D702F746D7054374D614C36202F6574632F6D756C7469706174682E636F6E66 terminal=? res=success' >type=CRED_ACQ msg=audit(1386575661.954:55): pid=2695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1386575661.956:56): pid=2695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1386575661.959:57): pid=2695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1386575661.959:58): pid=2695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1386575661.972:59): pid=2697 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F70657273697374202F6574632F6D756C7469706174682E636F6E66 terminal=? res=success' >type=CRED_ACQ msg=audit(1386575661.972:60): pid=2697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1386575661.973:61): pid=2697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1386575662.025:62): pid=2697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1386575662.025:63): pid=2697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1386575662.039:64): pid=2714 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7362696E2F6D756C746970617468202D46 terminal=? res=success' >type=CRED_ACQ msg=audit(1386575662.039:65): pid=2714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1386575662.040:66): pid=2714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1386575662.077:67): pid=2714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1386575662.077:68): pid=2714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1386575662.086:69): pid=2734 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F7664736D2D746F6F6C20736572766963652D72656C6F6164206D756C74697061746864 terminal=? res=success' >type=CRED_ACQ msg=audit(1386575662.087:70): pid=2734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1386575662.087:71): pid=2734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1386575663.749:72): pid=2734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1386575663.750:73): pid=2734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1386575663.767:74): pid=2770 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7362696E2F6C766D2064756D70636F6E66696720676C6F62616C2F6C6F636B696E675F74797065 terminal=? res=success' >type=CRED_ACQ msg=audit(1386575663.768:75): pid=2770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1386575663.769:76): pid=2770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1386575663.804:77): pid=2770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1386575663.804:78): pid=2770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1386575664.147:79): pid=2776 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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termi' >type=CRED_ACQ msg=audit(1386575664.148:80): pid=2776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1386575664.148:81): pid=2776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1386575664.214:82): pid=2776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1386575664.214:83): pid=2776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1386575664.298:84): pid=2787 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1386575664.298:85): pid=2787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1386575664.299:86): pid=2787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1386575664.355:87): pid=2787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1386575664.355:88): pid=2787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1386575664.443:89): pid=2791 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=CRED_ACQ msg=audit(1386575664.443:90): pid=2791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1386575664.444:91): pid=2791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1386575664.499:92): pid=2791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1386575664.499:93): pid=2791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1386575664.544:94): pid=2794 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1386575664.544:95): pid=2794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1386575664.544:96): pid=2794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1386575664.585:97): pid=2794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1386575664.585:98): pid=2794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1386575666.624:99): pid=2800 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1386575666.625:100): pid=2800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1386575666.626:101): pid=2800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1386575666.679:102): pid=2800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1386575666.680:103): pid=2800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386575679.887:104): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="ntpdate" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1386575679.894:105): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="crond" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386575680.004:106): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="ntpd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SYSTEM_BOOT msg=audit(1386575680.015:107): pid=2832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='init exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' >type=SYSTEM_RUNLEVEL msg=audit(1386575680.021:108): pid=2832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='old-level=N new-level=3 exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386575680.025:109): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-update-utmp-runlevel" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386575680.025:110): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-update-utmp-runlevel" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1386575701.629:111): pid=2839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386575701.629:112): pid=2839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386575701.631:113): login pid=2839 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1 >type=USER_START msg=audit(1386575701.649:114): pid=2839 uid=0 auid=0 ses=1 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386575701.650:115): pid=2839 uid=0 auid=0 ses=1 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386575701.666:116): pid=2839 uid=0 auid=0 ses=1 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386575701.669:117): pid=2839 uid=0 auid=0 ses=1 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_START msg=audit(1386575710.047:118): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-readahead-done" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386575710.047:119): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-readahead-done" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1386575747.526:120): pid=2664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="admiiin" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=failed' >type=AVC msg=audit(1386575747.527:121): avc: denied { lock } for pid=2664 comm="login" path="/var/log/btmp" dev="dm-8" ino=15 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1386575747.527:121): arch=c000003e syscall=72 success=no exit=-13 a0=4 a1=7 a2=7fff9eafdd90 a3=8 items=0 ppid=1 pid=2664 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=tty1 comm="login" exe="/usr/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_LOGIN msg=audit(1386575747.527:122): pid=2664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=login acct="admiiin" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=failed' >type=USER_AUTH msg=audit(1386575757.123:123): pid=2664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="admin" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success' >type=USER_ACCT msg=audit(1386575757.127:124): pid=2664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="admin" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success' >type=CRED_ACQ msg=audit(1386575757.128:125): pid=2664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="admin" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success' >type=LOGIN msg=audit(1386575757.128:126): login pid=2664 uid=0 old auid=4294967295 new auid=1000 old ses=4294967295 new ses=2 >type=USER_ROLE_CHANGE msg=audit(1386575757.252:127): pid=2664 uid=0 auid=1000 ses=2 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success' >type=USER_START msg=audit(1386575757.268:128): pid=2664 uid=0 auid=1000 ses=2 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="admin" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success' >type=CRED_REFR msg=audit(1386575757.268:129): pid=2664 uid=0 auid=1000 ses=2 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="admin" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success' >type=AVC msg=audit(1386575757.269:130): avc: denied { lock } for pid=2664 comm="login" path="/var/log/wtmp" dev="dm-8" ino=38 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1386575757.269:130): arch=c000003e syscall=72 success=no exit=-13 a0=4 a1=7 a2=7fff9eafdf50 a3=8 items=0 ppid=1 pid=2664 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=1000 fsgid=0 ses=2 tty=tty1 comm="login" exe="/usr/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_LOGIN msg=audit(1386575757.270:131): pid=2664 uid=0 auid=1000 ses=2 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success' >type=USER_CMD msg=audit(1386575757.330:132): pid=2877 uid=1000 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/admin" cmd=646D657367202D6E2031 terminal=tty1 res=success' >type=CRED_ACQ msg=audit(1386575757.331:133): pid=2877 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/tty1 res=success' >type=USER_START msg=audit(1386575757.334:134): pid=2877 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/tty1 res=success' >type=USER_END msg=audit(1386575757.348:135): pid=2877 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/tty1 res=success' >type=CRED_DISP msg=audit(1386575757.349:136): pid=2877 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/tty1 res=success' >type=USER_CMD msg=audit(1386575757.362:137): pid=2882 uid=1000 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/admin" cmd="/usr/bin/ovirt-node-setup" terminal=tty1 res=success' >type=CRED_ACQ msg=audit(1386575757.363:138): pid=2882 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/tty1 res=success' >type=USER_START msg=audit(1386575757.363:139): pid=2882 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/tty1 res=success' >type=SERVICE_STOP msg=audit(1386575854.659:140): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="network" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386575854.715:141): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="ntpd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386575854.796:142): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nfs-lock" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386575854.796:143): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nfs-lock" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386575854.799:144): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rpcbind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1386575859.134:145): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="network" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386575859.201:146): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="ntpd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386575860.080:147): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386575889.276:148): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="ntpdate" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1386575889.326:149): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rpcbind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386575889.438:150): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nfs-lock" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386575889.509:151): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nfs-server" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1386575889.543:152): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nfs-secure" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1386575922.656:153): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-localed" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386575969.957:154): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsm-reg" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1386575972.288:155): dev=eno1 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1386575972.288:155): arch=c000003e syscall=16 success=yes exit=0 a0=3 a1=89a2 a2=7fff4c252380 a3=7fff4c252110 items=0 ppid=3501 pid=3526 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="brctl" exe="/usr/sbin/brctl" subj=system_u:system_r:brctl_t:s0 key=(null) >type=USYS_CONFIG msg=audit(1386575978.740:156): pid=3690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time exe="/usr/sbin/hwclock" hostname=? addr=? terminal=? res=success' >type=USYS_CONFIG msg=audit(1386575977.000:157): pid=3692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time exe="/usr/sbin/hwclock" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386575977.177:158): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsm-reg" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1386576001.325:159): pid=3704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1386576001.325:160): pid=3703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386576001.325:161): pid=3704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386576001.325:162): pid=3703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386576001.327:163): login pid=3703 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3 >type=LOGIN msg=audit(1386576001.327:164): login pid=3704 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4 >type=USER_START msg=audit(1386576001.342:165): pid=3703 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_START msg=audit(1386576001.342:166): pid=3704 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386576001.342:167): pid=3703 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386576001.342:168): pid=3704 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386576001.372:169): pid=3704 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386576001.376:170): pid=3704 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386576001.385:171): pid=3703 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386576001.387:172): pid=3703 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRYPTO_KEY_USER msg=audit(1386576036.910:173): pid=3714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=destroy kind=server fp=40:91:dd:53:a4:66:d8:a3:e3:42:15:22:27:ba:07:77 direction=? spid=3714 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1386576036.911:174): pid=3714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=destroy kind=server fp=6f:62:94:d9:a9:dd:86:1d:d2:30:e4:6d:96:02:10:33 direction=? spid=3714 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1386576036.911:175): pid=3714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=destroy kind=server fp=95:8d:11:ca:8e:fb:ab:9f:23:e2:1e:10:88:8b:58:6d direction=? spid=3714 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1386576036.914:176): pid=3713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=destroy kind=server fp=40:91:dd:53:a4:66:d8:a3:e3:42:15:22:27:ba:07:77 direction=? spid=3713 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1386576036.914:177): pid=3713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=destroy kind=server fp=6f:62:94:d9:a9:dd:86:1d:d2:30:e4:6d:96:02:10:33 direction=? spid=3713 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1386576036.914:178): pid=3713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=destroy kind=server fp=95:8d:11:ca:8e:fb:ab:9f:23:e2:1e:10:88:8b:58:6d direction=? spid=3713 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=? res=success' >type=USER_LOGIN msg=audit(1386576036.914:179): pid=3713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=login acct=28756E6B6E6F776E207573657229 exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=ssh res=failed' >type=CRYPTO_KEY_USER msg=audit(1386576049.300:180): pid=3716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=destroy kind=server fp=40:91:dd:53:a4:66:d8:a3:e3:42:15:22:27:ba:07:77 direction=? spid=3716 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1386576049.300:181): pid=3716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=destroy kind=server fp=6f:62:94:d9:a9:dd:86:1d:d2:30:e4:6d:96:02:10:33 direction=? spid=3716 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1386576049.300:182): pid=3716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=destroy kind=server fp=95:8d:11:ca:8e:fb:ab:9f:23:e2:1e:10:88:8b:58:6d direction=? spid=3716 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1386576049.302:183): pid=3715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=destroy kind=server fp=40:91:dd:53:a4:66:d8:a3:e3:42:15:22:27:ba:07:77 direction=? spid=3715 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1386576049.302:184): pid=3715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=destroy kind=server fp=6f:62:94:d9:a9:dd:86:1d:d2:30:e4:6d:96:02:10:33 direction=? spid=3715 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1386576049.302:185): pid=3715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=destroy kind=server fp=95:8d:11:ca:8e:fb:ab:9f:23:e2:1e:10:88:8b:58:6d direction=? spid=3715 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=? res=success' >type=USER_LOGIN msg=audit(1386576049.302:186): pid=3715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=login acct=28756E6B6E6F776E207573657229 exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=ssh res=failed' >type=USER_ACCT msg=audit(1386576061.396:187): pid=3718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386576061.396:188): pid=3718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386576061.397:189): login pid=3718 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=5 >type=USER_START msg=audit(1386576061.402:190): pid=3718 uid=0 auid=0 ses=5 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386576061.403:191): pid=3718 uid=0 auid=0 ses=5 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386576061.480:192): pid=3718 uid=0 auid=0 ses=5 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386576061.483:193): pid=3718 uid=0 auid=0 ses=5 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_STOP msg=audit(1386576274.739:194): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-localed" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386576536.496:195): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386576536.496:196): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1386576601.500:197): pid=3786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386576601.500:198): pid=3786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1386576601.501:199): pid=3788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386576601.501:200): login pid=3786 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=6 >type=USER_ACCT msg=audit(1386576601.501:201): pid=3787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386576601.501:202): pid=3788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386576601.501:203): pid=3787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386576601.502:204): login pid=3788 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=7 >type=LOGIN msg=audit(1386576601.502:205): login pid=3787 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=8 >type=USER_START msg=audit(1386576601.510:206): pid=3786 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386576601.511:207): pid=3786 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_START msg=audit(1386576601.511:208): pid=3787 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386576601.512:209): pid=3787 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_START msg=audit(1386576601.512:210): pid=3788 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386576601.513:211): pid=3788 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386576601.522:212): pid=3787 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386576601.525:213): pid=3787 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386576601.525:214): pid=3786 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386576601.527:215): pid=3786 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386576601.535:216): pid=3788 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386576601.537:217): pid=3788 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1386577201.549:218): pid=3831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386577201.549:219): pid=3831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386577201.550:220): login pid=3831 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=9 >type=USER_ACCT msg=audit(1386577201.551:221): pid=3832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386577201.551:222): pid=3832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386577201.552:223): login pid=3832 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=10 >type=USER_START msg=audit(1386577201.555:224): pid=3831 uid=0 auid=0 ses=9 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386577201.555:225): pid=3831 uid=0 auid=0 ses=9 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_START msg=audit(1386577201.556:226): pid=3832 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386577201.556:227): pid=3832 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386577201.567:228): pid=3831 uid=0 auid=0 ses=9 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386577201.571:229): pid=3831 uid=0 auid=0 ses=9 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386577201.578:230): pid=3832 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386577201.581:231): pid=3832 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1386577501.591:232): pid=3855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386577501.591:233): pid=3855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386577501.592:234): login pid=3855 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=11 >type=USER_START msg=audit(1386577501.596:235): pid=3855 uid=0 auid=0 ses=11 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386577501.596:236): pid=3855 uid=0 auid=0 ses=11 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386577501.603:237): pid=3855 uid=0 auid=0 ses=11 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386577501.606:238): pid=3855 uid=0 auid=0 ses=11 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1386577801.615:239): pid=3874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386577801.616:240): pid=3874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386577801.616:242): login pid=3874 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=12 >type=USER_ACCT msg=audit(1386577801.616:241): pid=3875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386577801.616:243): pid=3875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386577801.617:244): login pid=3875 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=13 >type=USER_START msg=audit(1386577801.620:245): pid=3874 uid=0 auid=0 ses=12 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386577801.620:246): pid=3874 uid=0 auid=0 ses=12 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_START msg=audit(1386577801.620:247): pid=3875 uid=0 auid=0 ses=13 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386577801.621:248): pid=3875 uid=0 auid=0 ses=13 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386577801.631:249): pid=3874 uid=0 auid=0 ses=12 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386577801.634:250): pid=3874 uid=0 auid=0 ses=12 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386577801.643:251): pid=3875 uid=0 auid=0 ses=13 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386577801.645:252): pid=3875 uid=0 auid=0 ses=13 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1386578401.656:253): pid=3921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386578401.656:254): pid=3921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386578401.657:255): login pid=3921 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=14 >type=USER_ACCT msg=audit(1386578401.657:256): pid=3922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386578401.657:257): pid=3922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386578401.658:258): login pid=3922 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=15 >type=USER_ACCT msg=audit(1386578401.659:259): pid=3923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386578401.659:260): pid=3923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386578401.660:261): login pid=3923 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=16 >type=USER_START msg=audit(1386578401.660:262): pid=3921 uid=0 auid=0 ses=14 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386578401.661:263): pid=3921 uid=0 auid=0 ses=14 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_START msg=audit(1386578401.661:264): pid=3922 uid=0 auid=0 ses=15 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386578401.662:265): pid=3922 uid=0 auid=0 ses=15 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_START msg=audit(1386578401.663:266): pid=3923 uid=0 auid=0 ses=16 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386578401.663:267): pid=3923 uid=0 auid=0 ses=16 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386578401.668:268): pid=3921 uid=0 auid=0 ses=14 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386578401.669:269): pid=3921 uid=0 auid=0 ses=14 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386578401.669:270): pid=3922 uid=0 auid=0 ses=15 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386578401.671:271): pid=3922 uid=0 auid=0 ses=15 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386578401.683:272): pid=3923 uid=0 auid=0 ses=16 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386578401.685:273): pid=3923 uid=0 auid=0 ses=16 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1386579001.699:274): pid=3964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386579001.699:275): pid=3964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1386579001.699:276): pid=3965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386579001.699:277): pid=3965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386579001.700:278): login pid=3964 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=17 >type=LOGIN msg=audit(1386579001.700:279): login pid=3965 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=18 >type=USER_START msg=audit(1386579001.703:280): pid=3964 uid=0 auid=0 ses=17 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386579001.704:281): pid=3964 uid=0 auid=0 ses=17 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_START msg=audit(1386579001.704:282): pid=3965 uid=0 auid=0 ses=18 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386579001.704:283): pid=3965 uid=0 auid=0 ses=18 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386579001.714:284): pid=3964 uid=0 auid=0 ses=17 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386579001.717:285): pid=3964 uid=0 auid=0 ses=17 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386579001.726:286): pid=3965 uid=0 auid=0 ses=18 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386579001.728:287): pid=3965 uid=0 auid=0 ses=18 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1386579301.738:288): pid=3992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386579301.738:289): pid=3992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386579301.739:290): login pid=3992 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=19 >type=USER_START msg=audit(1386579301.743:291): pid=3992 uid=0 auid=0 ses=19 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386579301.743:292): pid=3992 uid=0 auid=0 ses=19 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386579301.751:293): pid=3992 uid=0 auid=0 ses=19 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386579301.753:294): pid=3992 uid=0 auid=0 ses=19 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1386579601.765:295): pid=4011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386579601.765:296): pid=4011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386579601.766:297): login pid=4011 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=20 >type=USER_ACCT msg=audit(1386579601.767:298): pid=4012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386579601.767:299): pid=4012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386579601.768:300): login pid=4012 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=21 >type=USER_START msg=audit(1386579601.770:301): pid=4011 uid=0 auid=0 ses=20 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386579601.770:302): pid=4011 uid=0 auid=0 ses=20 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_START msg=audit(1386579601.771:303): pid=4012 uid=0 auid=0 ses=21 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386579601.772:304): pid=4012 uid=0 auid=0 ses=21 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386579601.781:305): pid=4011 uid=0 auid=0 ses=20 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386579601.783:306): pid=4011 uid=0 auid=0 ses=20 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386579601.793:307): pid=4012 uid=0 auid=0 ses=21 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386579601.795:308): pid=4012 uid=0 auid=0 ses=21 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1386579661.804:309): pid=4022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386579661.804:310): pid=4022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386579661.805:311): login pid=4022 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=22 >type=USER_START msg=audit(1386579661.808:312): pid=4022 uid=0 auid=0 ses=22 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386579661.809:313): pid=4022 uid=0 auid=0 ses=22 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386579661.876:314): pid=4022 uid=0 auid=0 ses=22 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386579661.878:315): pid=4022 uid=0 auid=0 ses=22 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1386580201.890:316): pid=4083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386580201.890:317): pid=4083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386580201.891:318): login pid=4083 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=23 >type=USER_ACCT msg=audit(1386580201.893:319): pid=4085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386580201.893:320): pid=4085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386580201.893:321): login pid=4085 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=24 >type=USER_ACCT msg=audit(1386580201.894:322): pid=4084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386580201.894:323): pid=4084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_START msg=audit(1386580201.895:324): pid=4083 uid=0 auid=0 ses=23 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386580201.895:325): login pid=4084 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=25 >type=CRED_REFR msg=audit(1386580201.895:326): pid=4083 uid=0 auid=0 ses=23 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_START msg=audit(1386580201.897:327): pid=4085 uid=0 auid=0 ses=24 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386580201.898:328): pid=4085 uid=0 auid=0 ses=24 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_START msg=audit(1386580201.898:329): pid=4084 uid=0 auid=0 ses=25 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386580201.899:330): pid=4084 uid=0 auid=0 ses=25 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386580201.906:331): pid=4083 uid=0 auid=0 ses=23 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386580201.908:332): pid=4084 uid=0 auid=0 ses=25 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386580201.908:333): pid=4083 uid=0 auid=0 ses=23 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386580201.910:334): pid=4084 uid=0 auid=0 ses=25 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386580201.919:335): pid=4085 uid=0 auid=0 ses=24 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386580201.921:336): pid=4085 uid=0 auid=0 ses=24 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1386580801.935:337): pid=4125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386580801.935:338): pid=4125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386580801.935:339): login pid=4125 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=26 >type=USER_ACCT msg=audit(1386580801.936:340): pid=4126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386580801.936:341): pid=4126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386580801.937:342): login pid=4126 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=27 >type=USER_START msg=audit(1386580801.939:343): pid=4125 uid=0 auid=0 ses=26 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386580801.940:344): pid=4125 uid=0 auid=0 ses=26 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_START msg=audit(1386580801.940:345): pid=4126 uid=0 auid=0 ses=27 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386580801.941:346): pid=4126 uid=0 auid=0 ses=27 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386580801.952:347): pid=4125 uid=0 auid=0 ses=26 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386580801.954:348): pid=4125 uid=0 auid=0 ses=26 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386580801.961:349): pid=4126 uid=0 auid=0 ses=27 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386580801.963:350): pid=4126 uid=0 auid=0 ses=27 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1386581101.973:351): pid=4149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386581101.974:352): pid=4149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386581101.974:353): login pid=4149 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=28 >type=USER_START msg=audit(1386581101.978:354): pid=4149 uid=0 auid=0 ses=28 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386581101.979:355): pid=4149 uid=0 auid=0 ses=28 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386581101.986:356): pid=4149 uid=0 auid=0 ses=28 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386581101.988:357): pid=4149 uid=0 auid=0 ses=28 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1386581401.999:358): pid=4168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386581401.999:359): pid=4168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386581402.000:360): login pid=4168 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=29 >type=USER_ACCT msg=audit(1386581402.002:361): pid=4169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386581402.002:362): pid=4169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386581402.002:363): login pid=4169 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=30 >type=USER_START msg=audit(1386581402.004:364): pid=4168 uid=0 auid=0 ses=29 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386581402.004:365): pid=4168 uid=0 auid=0 ses=29 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_START msg=audit(1386581402.006:366): pid=4169 uid=0 auid=0 ses=30 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386581402.006:367): pid=4169 uid=0 auid=0 ses=30 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386581402.017:368): pid=4168 uid=0 auid=0 ses=29 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386581402.020:369): pid=4168 uid=0 auid=0 ses=29 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386581402.027:370): pid=4169 uid=0 auid=0 ses=30 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386581402.029:371): pid=4169 uid=0 auid=0 ses=30 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1386582001.042:372): pid=4207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386582001.042:373): pid=4207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386582001.043:374): login pid=4207 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=31 >type=USER_ACCT msg=audit(1386582001.043:375): pid=4209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386582001.044:376): pid=4209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1386582001.044:377): pid=4208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386582001.044:379): login pid=4209 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=32 >type=CRED_ACQ msg=audit(1386582001.044:378): pid=4208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386582001.044:380): login pid=4208 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=33 >type=USER_START msg=audit(1386582001.046:381): pid=4207 uid=0 auid=0 ses=31 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386582001.047:382): pid=4207 uid=0 auid=0 ses=31 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_START msg=audit(1386582001.047:383): pid=4209 uid=0 auid=0 ses=32 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386582001.048:384): pid=4209 uid=0 auid=0 ses=32 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_START msg=audit(1386582001.048:385): pid=4208 uid=0 auid=0 ses=33 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386582001.049:386): pid=4208 uid=0 auid=0 ses=33 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386582001.056:387): pid=4208 uid=0 auid=0 ses=33 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386582001.058:388): pid=4207 uid=0 auid=0 ses=31 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386582001.058:389): pid=4208 uid=0 auid=0 ses=33 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386582001.060:390): pid=4207 uid=0 auid=0 ses=31 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386582001.068:391): pid=4209 uid=0 auid=0 ses=32 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386582001.070:392): pid=4209 uid=0 auid=0 ses=32 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1386582601.083:393): pid=4250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386582601.083:394): pid=4250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386582601.084:395): login pid=4250 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=34 >type=USER_ACCT msg=audit(1386582601.085:396): pid=4251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386582601.085:397): pid=4251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386582601.086:398): login pid=4251 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=35 >type=USER_START msg=audit(1386582601.088:399): pid=4250 uid=0 auid=0 ses=34 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386582601.088:400): pid=4250 uid=0 auid=0 ses=34 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_START msg=audit(1386582601.090:401): pid=4251 uid=0 auid=0 ses=35 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386582601.090:402): pid=4251 uid=0 auid=0 ses=35 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386582601.099:403): pid=4250 uid=0 auid=0 ses=34 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386582601.101:404): pid=4250 uid=0 auid=0 ses=34 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386582601.111:405): pid=4251 uid=0 auid=0 ses=35 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386582601.113:406): pid=4251 uid=0 auid=0 ses=35 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1386582901.124:407): pid=4274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386582901.124:408): pid=4274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386582901.124:409): login pid=4274 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=36 >type=USER_START msg=audit(1386582901.128:410): pid=4274 uid=0 auid=0 ses=36 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386582901.128:411): pid=4274 uid=0 auid=0 ses=36 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386582901.136:412): pid=4274 uid=0 auid=0 ses=36 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386582901.138:413): pid=4274 uid=0 auid=0 ses=36 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1386583201.147:414): pid=4293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386583201.147:415): pid=4293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386583201.148:416): login pid=4293 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=37 >type=USER_ACCT msg=audit(1386583201.148:417): pid=4294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386583201.149:418): pid=4294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386583201.149:419): login pid=4294 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=38 >type=USER_START msg=audit(1386583201.152:420): pid=4293 uid=0 auid=0 ses=37 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386583201.153:421): pid=4293 uid=0 auid=0 ses=37 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_START msg=audit(1386583201.153:422): pid=4294 uid=0 auid=0 ses=38 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386583201.154:423): pid=4294 uid=0 auid=0 ses=38 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386583201.166:424): pid=4293 uid=0 auid=0 ses=37 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386583201.168:425): pid=4293 uid=0 auid=0 ses=37 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386583201.179:426): pid=4294 uid=0 auid=0 ses=38 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386583201.181:427): pid=4294 uid=0 auid=0 ses=38 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1386583261.190:428): pid=4304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386583261.191:429): pid=4304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386583261.191:430): login pid=4304 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=39 >type=USER_START msg=audit(1386583261.195:431): pid=4304 uid=0 auid=0 ses=39 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386583261.195:432): pid=4304 uid=0 auid=0 ses=39 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386583261.262:433): pid=4304 uid=0 auid=0 ses=39 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386583261.264:434): pid=4304 uid=0 auid=0 ses=39 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1386583801.276:435): pid=4365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386583801.276:436): pid=4365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386583801.276:437): login pid=4365 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=40 >type=USER_ACCT msg=audit(1386583801.281:438): pid=4367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_START msg=audit(1386583801.281:439): pid=4365 uid=0 auid=0 ses=40 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1386583801.281:440): pid=4366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386583801.281:441): pid=4367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386583801.281:442): pid=4366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386583801.281:443): pid=4365 uid=0 auid=0 ses=40 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386583801.281:444): login pid=4367 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=41 >type=LOGIN msg=audit(1386583801.282:445): login pid=4366 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=42 >type=USER_START msg=audit(1386583801.285:446): pid=4367 uid=0 auid=0 ses=41 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386583801.285:447): pid=4367 uid=0 auid=0 ses=41 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_START msg=audit(1386583801.286:448): pid=4366 uid=0 auid=0 ses=42 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386583801.286:449): pid=4366 uid=0 auid=0 ses=42 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386583801.292:450): pid=4365 uid=0 auid=0 ses=40 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386583801.294:451): pid=4365 uid=0 auid=0 ses=40 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386583801.296:452): pid=4366 uid=0 auid=0 ses=42 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386583801.298:453): pid=4366 uid=0 auid=0 ses=42 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386583801.306:454): pid=4367 uid=0 auid=0 ses=41 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386583801.309:455): pid=4367 uid=0 auid=0 ses=41 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1386584401.322:456): pid=4408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386584401.322:457): pid=4408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386584401.322:458): login pid=4408 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=43 >type=USER_ACCT msg=audit(1386584401.323:459): pid=4409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386584401.324:460): pid=4409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386584401.324:461): login pid=4409 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=44 >type=USER_START msg=audit(1386584401.326:462): pid=4408 uid=0 auid=0 ses=43 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386584401.327:463): pid=4408 uid=0 auid=0 ses=43 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_START msg=audit(1386584401.328:464): pid=4409 uid=0 auid=0 ses=44 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386584401.328:465): pid=4409 uid=0 auid=0 ses=44 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386584401.337:466): pid=4408 uid=0 auid=0 ses=43 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386584401.340:467): pid=4408 uid=0 auid=0 ses=43 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386584401.349:468): pid=4409 uid=0 auid=0 ses=44 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386584401.351:469): pid=4409 uid=0 auid=0 ses=44 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1386584701.361:470): pid=4431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386584701.362:471): pid=4431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386584701.362:472): login pid=4431 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=45 >type=USER_START msg=audit(1386584701.366:473): pid=4431 uid=0 auid=0 ses=45 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386584701.366:474): pid=4431 uid=0 auid=0 ses=45 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386584701.374:475): pid=4431 uid=0 auid=0 ses=45 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386584701.376:476): pid=4431 uid=0 auid=0 ses=45 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1386585001.386:477): pid=4450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386585001.387:478): pid=4450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386585001.387:479): login pid=4450 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=46 >type=USER_ACCT msg=audit(1386585001.388:480): pid=4451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386585001.388:481): pid=4451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386585001.389:482): login pid=4451 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=47 >type=USER_START msg=audit(1386585001.391:483): pid=4450 uid=0 auid=0 ses=46 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386585001.392:484): pid=4450 uid=0 auid=0 ses=46 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_START msg=audit(1386585001.392:485): pid=4451 uid=0 auid=0 ses=47 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386585001.392:486): pid=4451 uid=0 auid=0 ses=47 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386585001.402:487): pid=4450 uid=0 auid=0 ses=46 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386585001.405:488): pid=4450 uid=0 auid=0 ses=46 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386585001.412:489): pid=4451 uid=0 auid=0 ses=47 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386585001.414:490): pid=4451 uid=0 auid=0 ses=47 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1386585601.427:491): pid=4489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386585601.427:492): pid=4489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386585601.427:493): login pid=4489 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=48 >type=USER_ACCT msg=audit(1386585601.428:494): pid=4490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386585601.429:495): pid=4490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1386585601.429:496): pid=4491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386585601.429:497): login pid=4490 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=49 >type=CRED_ACQ msg=audit(1386585601.429:498): pid=4491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386585601.430:499): login pid=4491 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=50 >type=USER_START msg=audit(1386585601.431:500): pid=4489 uid=0 auid=0 ses=48 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386585601.432:501): pid=4489 uid=0 auid=0 ses=48 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_START msg=audit(1386585601.433:502): pid=4490 uid=0 auid=0 ses=49 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386585601.433:503): pid=4490 uid=0 auid=0 ses=49 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_START msg=audit(1386585601.434:504): pid=4491 uid=0 auid=0 ses=50 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386585601.434:505): pid=4491 uid=0 auid=0 ses=50 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386585601.441:506): pid=4490 uid=0 auid=0 ses=49 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386585601.443:507): pid=4490 uid=0 auid=0 ses=49 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386585601.445:508): pid=4489 uid=0 auid=0 ses=48 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386585601.447:509): pid=4489 uid=0 auid=0 ses=48 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386585601.455:510): pid=4491 uid=0 auid=0 ses=50 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386585601.457:511): pid=4491 uid=0 auid=0 ses=50 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1386586201.471:512): pid=4532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386586201.471:513): pid=4532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386586201.472:514): login pid=4532 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=51 >type=USER_ACCT msg=audit(1386586201.473:515): pid=4533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386586201.473:516): pid=4533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386586201.473:517): login pid=4533 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=52 >type=USER_START msg=audit(1386586201.476:518): pid=4532 uid=0 auid=0 ses=51 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386586201.477:519): pid=4532 uid=0 auid=0 ses=51 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_START msg=audit(1386586201.477:520): pid=4533 uid=0 auid=0 ses=52 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386586201.477:521): pid=4533 uid=0 auid=0 ses=52 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386586201.487:522): pid=4532 uid=0 auid=0 ses=51 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386586201.490:523): pid=4532 uid=0 auid=0 ses=51 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386586201.497:524): pid=4533 uid=0 auid=0 ses=52 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386586201.499:525): pid=4533 uid=0 auid=0 ses=52 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1386586501.509:526): pid=4556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386586501.510:527): pid=4556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386586501.510:528): login pid=4556 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=53 >type=USER_START msg=audit(1386586501.514:529): pid=4556 uid=0 auid=0 ses=53 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386586501.515:530): pid=4556 uid=0 auid=0 ses=53 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386586501.522:531): pid=4556 uid=0 auid=0 ses=53 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386586501.524:532): pid=4556 uid=0 auid=0 ses=53 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1386586801.534:533): pid=4575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386586801.535:534): pid=4575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386586801.535:535): login pid=4575 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=54 >type=USER_ACCT msg=audit(1386586801.536:536): pid=4576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386586801.536:537): pid=4576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386586801.536:538): login pid=4576 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=55 >type=USER_START msg=audit(1386586801.539:539): pid=4575 uid=0 auid=0 ses=54 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386586801.539:540): pid=4575 uid=0 auid=0 ses=54 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_START msg=audit(1386586801.540:541): pid=4576 uid=0 auid=0 ses=55 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386586801.540:542): pid=4576 uid=0 auid=0 ses=55 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386586801.551:543): pid=4575 uid=0 auid=0 ses=54 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386586801.553:544): pid=4575 uid=0 auid=0 ses=54 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386586801.560:545): pid=4576 uid=0 auid=0 ses=55 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386586801.562:546): pid=4576 uid=0 auid=0 ses=55 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1386586861.570:547): pid=4586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386586861.571:548): pid=4586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386586861.571:549): login pid=4586 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=56 >type=USER_START msg=audit(1386586861.575:550): pid=4586 uid=0 auid=0 ses=56 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386586861.575:551): pid=4586 uid=0 auid=0 ses=56 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386586861.642:552): pid=4586 uid=0 auid=0 ses=56 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386586861.644:553): pid=4586 uid=0 auid=0 ses=56 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1386587401.657:554): pid=4647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386587401.658:555): pid=4647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386587401.658:556): login pid=4647 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=57 >type=USER_ACCT msg=audit(1386587401.661:557): pid=4648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386587401.662:558): pid=4648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_START msg=audit(1386587401.662:559): pid=4647 uid=0 auid=0 ses=57 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386587401.662:560): login pid=4648 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=58 >type=CRED_REFR msg=audit(1386587401.662:561): pid=4647 uid=0 auid=0 ses=57 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1386587401.663:562): pid=4649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386587401.663:563): pid=4649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386587401.664:564): login pid=4649 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=59 >type=USER_START msg=audit(1386587401.666:565): pid=4648 uid=0 auid=0 ses=58 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386587401.666:566): pid=4648 uid=0 auid=0 ses=58 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_START msg=audit(1386587401.667:567): pid=4649 uid=0 auid=0 ses=59 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386587401.668:568): pid=4649 uid=0 auid=0 ses=59 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386587401.674:569): pid=4647 uid=0 auid=0 ses=57 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386587401.675:570): pid=4648 uid=0 auid=0 ses=58 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386587401.676:571): pid=4647 uid=0 auid=0 ses=57 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386587401.677:572): pid=4648 uid=0 auid=0 ses=58 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386587401.689:573): pid=4649 uid=0 auid=0 ses=59 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386587401.691:574): pid=4649 uid=0 auid=0 ses=59 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1386588001.704:575): pid=4690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386588001.704:576): pid=4690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386588001.704:577): login pid=4690 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=60 >type=USER_ACCT msg=audit(1386588001.706:578): pid=4691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386588001.706:579): pid=4691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386588001.707:580): login pid=4691 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=61 >type=USER_START msg=audit(1386588001.708:581): pid=4690 uid=0 auid=0 ses=60 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386588001.709:582): pid=4690 uid=0 auid=0 ses=60 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_START msg=audit(1386588001.710:583): pid=4691 uid=0 auid=0 ses=61 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386588001.710:584): pid=4691 uid=0 auid=0 ses=61 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386588001.720:585): pid=4690 uid=0 auid=0 ses=60 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386588001.722:586): pid=4690 uid=0 auid=0 ses=60 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386588001.730:587): pid=4691 uid=0 auid=0 ses=61 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386588001.733:588): pid=4691 uid=0 auid=0 ses=61 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1386588301.742:589): pid=4714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386588301.742:590): pid=4714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386588301.742:591): login pid=4714 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=62 >type=USER_START msg=audit(1386588301.746:592): pid=4714 uid=0 auid=0 ses=62 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386588301.746:593): pid=4714 uid=0 auid=0 ses=62 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386588301.752:594): pid=4714 uid=0 auid=0 ses=62 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386588301.754:595): pid=4714 uid=0 auid=0 ses=62 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1386588601.766:596): pid=4733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386588601.767:597): pid=4733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386588601.767:598): login pid=4733 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=63 >type=USER_ACCT msg=audit(1386588601.768:599): pid=4734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386588601.769:600): pid=4734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386588601.769:601): login pid=4734 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=64 >type=USER_START msg=audit(1386588601.771:602): pid=4733 uid=0 auid=0 ses=63 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386588601.772:603): pid=4733 uid=0 auid=0 ses=63 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_START msg=audit(1386588601.773:604): pid=4734 uid=0 auid=0 ses=64 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386588601.773:605): pid=4734 uid=0 auid=0 ses=64 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386588601.783:606): pid=4733 uid=0 auid=0 ses=63 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386588601.785:607): pid=4733 uid=0 auid=0 ses=63 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386588601.794:608): pid=4734 uid=0 auid=0 ses=64 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386588601.796:609): pid=4734 uid=0 auid=0 ses=64 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1386589201.809:610): pid=4772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386589201.810:611): pid=4772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386589201.810:612): login pid=4772 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=65 >type=USER_ACCT msg=audit(1386589201.811:613): pid=4773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386589201.811:614): pid=4773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386589201.812:615): login pid=4773 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=66 >type=USER_ACCT msg=audit(1386589201.812:616): pid=4774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386589201.813:617): pid=4774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386589201.813:618): login pid=4774 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=67 >type=USER_START msg=audit(1386589201.814:619): pid=4772 uid=0 auid=0 ses=65 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386589201.815:620): pid=4772 uid=0 auid=0 ses=65 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_START msg=audit(1386589201.815:621): pid=4773 uid=0 auid=0 ses=66 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386589201.816:622): pid=4773 uid=0 auid=0 ses=66 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_START msg=audit(1386589201.816:623): pid=4774 uid=0 auid=0 ses=67 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386589201.817:624): pid=4774 uid=0 auid=0 ses=67 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386589201.823:625): pid=4773 uid=0 auid=0 ses=66 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386589201.825:626): pid=4773 uid=0 auid=0 ses=66 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386589201.828:627): pid=4772 uid=0 auid=0 ses=65 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386589201.830:628): pid=4772 uid=0 auid=0 ses=65 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386589201.837:629): pid=4774 uid=0 auid=0 ses=67 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386589201.840:630): pid=4774 uid=0 auid=0 ses=67 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1386589801.853:631): pid=4815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386589801.853:632): pid=4815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386589801.854:633): login pid=4815 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=68 >type=USER_ACCT msg=audit(1386589801.854:634): pid=4816 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386589801.855:635): pid=4816 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386589801.855:636): login pid=4816 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=69 >type=USER_START msg=audit(1386589801.858:637): pid=4815 uid=0 auid=0 ses=68 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386589801.858:638): pid=4815 uid=0 auid=0 ses=68 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_START msg=audit(1386589801.858:639): pid=4816 uid=0 auid=0 ses=69 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386589801.859:640): pid=4816 uid=0 auid=0 ses=69 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386589801.870:641): pid=4815 uid=0 auid=0 ses=68 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386589801.872:642): pid=4815 uid=0 auid=0 ses=68 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386589801.878:643): pid=4816 uid=0 auid=0 ses=69 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386589801.880:644): pid=4816 uid=0 auid=0 ses=69 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1386590101.890:645): pid=4839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386590101.891:646): pid=4839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386590101.891:647): login pid=4839 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=70 >type=USER_START msg=audit(1386590101.895:648): pid=4839 uid=0 auid=0 ses=70 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386590101.896:649): pid=4839 uid=0 auid=0 ses=70 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386590101.903:650): pid=4839 uid=0 auid=0 ses=70 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386590101.905:651): pid=4839 uid=0 auid=0 ses=70 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_START msg=audit(1386590346.800:652): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="getty@tty2" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1386590353.244:653): pid=4860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty2 res=failed' >type=AVC msg=audit(1386590353.244:654): avc: denied { lock } for pid=4860 comm="login" path="/var/log/btmp" dev="dm-8" ino=15 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1386590353.244:654): arch=c000003e syscall=72 success=no exit=-13 a0=4 a1=7 a2=7fff62ba8da0 a3=8 items=0 ppid=1 pid=4860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=tty2 comm="login" exe="/usr/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_LOGIN msg=audit(1386590353.244:655): pid=4860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/bin/login" hostname=? addr=? terminal=tty2 res=failed' >type=USER_AUTH msg=audit(1386590360.522:656): pid=4860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty2 res=failed' >type=AVC msg=audit(1386590360.522:657): avc: denied { lock } for pid=4860 comm="login" path="/var/log/btmp" dev="dm-8" ino=15 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1386590360.522:657): arch=c000003e syscall=72 success=no exit=-13 a0=4 a1=7 a2=7fff62ba8da0 a3=8 items=0 ppid=1 pid=4860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=tty2 comm="login" exe="/usr/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_LOGIN msg=audit(1386590360.522:658): pid=4860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/bin/login" hostname=? addr=? terminal=tty2 res=failed' >type=SERVICE_START msg=audit(1386590384.523:659): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sysstat" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386590384.524:660): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sysstat" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386590384.525:661): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsm-restore-net-config" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386590384.525:662): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsm-restore-net-config" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1386590384.526:663): pid=2487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=destroy kind=server fp=40:91:dd:53:a4:66:d8:a3:e3:42:15:22:27:ba:07:77 direction=? spid=2487 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1386590384.526:664): pid=2487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=destroy kind=server fp=6f:62:94:d9:a9:dd:86:1d:d2:30:e4:6d:96:02:10:33 direction=? spid=2487 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1386590384.526:665): pid=2487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=destroy kind=server fp=95:8d:11:ca:8e:fb:ab:9f:23:e2:1e:10:88:8b:58:6d direction=? spid=2487 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1386590384.531:666): pid=2664 uid=0 auid=1000 ses=2 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="admin" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success' >type=USER_END msg=audit(1386590384.532:667): pid=2882 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/tty1 res=success' >type=CRED_DISP msg=audit(1386590384.532:668): pid=2882 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/tty1 res=success' >type=SERVICE_START msg=audit(1386590384.538:669): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="irqbalance" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386590384.538:670): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="irqbalance" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386590384.538:671): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="supervdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386590384.538:672): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="supervdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386590384.539:673): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="avahi-daemon" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386590384.539:674): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="avahi-daemon" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386590384.539:675): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="mcelog" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1386590384.540:676): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="collectd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386590384.540:677): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="collectd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386590384.544:678): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="libvirtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386590384.544:679): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="libvirtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386590384.545:680): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="glusterd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386590384.545:681): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="glusterd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386590384.545:682): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rsyslog" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386590384.546:683): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sshd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386590384.551:684): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="crond" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386590384.558:685): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="getty@tty2" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386590384.565:686): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nfs-lock" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1386590384.570:687): pid=2664 uid=0 auid=1000 ses=2 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="admin" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=failed' >type=SERVICE_STOP msg=audit(1386590384.574:688): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rpcbind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1386590384.574:689): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="tuned" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1386590384.576:690): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="dbus" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386590384.576:691): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="dbus" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386590384.583:692): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386590384.587:693): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="netconsole" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386590384.588:694): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="netconsole" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386590384.589:695): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="iscsid" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386590384.589:696): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="iscsid" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386590384.606:697): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="multipathd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386590384.606:698): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="multipathd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386590384.608:699): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-logind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386590384.608:700): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-logind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386590384.609:701): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="anyterm" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_STOP msg=audit(1386590384.610:702): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="ntpd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386590384.614:703): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-user-sessions" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386590384.614:704): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-user-sessions" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386590384.619:705): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="dracut-shutdown" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1386590384.634:706): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="acpid" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386590384.634:707): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="acpid" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386590384.653:708): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="ovirt-post" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386590384.667:709): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="ovirt-kdump" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386590384.671:710): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="plymouth-reboot" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386590384.704:711): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="ovirt" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386590384.752:712): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="ovirt-awake" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386590384.803:713): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="ovirt-firstboot" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386590384.850:714): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="ovirt-early" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1386590385.336:715): dev=eno1 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1386590385.336:715): arch=c000003e syscall=16 success=yes exit=0 a0=3 a1=89a3 a2=7fffb0e64210 a3=7fffb0e63fa0 items=0 ppid=5087 pid=5133 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="brctl" exe="/usr/sbin/brctl" subj=system_u:system_r:brctl_t:s0 key=(null) >type=SERVICE_START msg=audit(1386590385.595:716): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="wdmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386590385.595:717): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="wdmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386590385.696:718): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="network" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1386590385.733:719): table=filter family=2 entries=15 >type=SYSCALL msg=audit(1386590385.733:719): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=145ad10 items=0 ppid=5245 pid=5253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1386590385.737:720): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1386590385.737:720): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=235e600 items=0 ppid=5245 pid=5255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1386590385.743:721): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1386590385.743:721): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1a6d600 items=0 ppid=5245 pid=5258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1386590385.746:722): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1386590385.746:722): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=6e1600 items=0 ppid=5245 pid=5259 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1386590385.749:723): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1386590385.749:723): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=262c600 items=0 ppid=5245 pid=5260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=SERVICE_START msg=audit(1386590385.792:724): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="iptables" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386590385.792:725): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="iptables" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386590386.596:726): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sanlock" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386590386.596:727): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sanlock" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386590386.597:728): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="fedora-loadmodules" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386590386.598:729): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="fedora-loadmodules" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386590386.598:730): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-vconsole-setup" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386590386.598:731): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-vconsole-setup" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386590386.598:732): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-modules-load" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386590386.598:733): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-modules-load" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386590386.598:734): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-sysctl" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386590386.598:735): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-sysctl" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=DAEMON_END msg=audit(1386590386.601:584): auditd normal halt, sending auid=0 pid=1 subj=system_u:system_r:init_t:s0 res=success >type=DAEMON_START msg=audit(1386590529.421:5802): auditd start, ver=2.3.2 format=raw kernel=3.11.9-200.fc19.x86_64 auid=4294967295 pid=2155 subj=system_u:system_r:initrc_t:s0 res=success >type=USER_CHAUTHTOK msg=audit(1386590530.347:34): pid=2458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:ovirt_t:s0 msg='op=display aging info id=0 exe="/usr/bin/chage" hostname=? addr=? terminal=? res=success' >type=USER_CHAUTHTOK msg=audit(1386590530.351:35): pid=2460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:ovirt_t:s0 msg='op=display aging info id=1000 exe="/usr/bin/chage" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386590531.149:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="ovirt-early" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386590531.152:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rsyslog" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386590531.226:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="ovirt-kdump" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386590531.313:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="ovirt-firstboot" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386590531.367:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="ovirt-awake" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386590531.381:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sshd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386590531.422:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="ovirt" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386590535.569:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386590535.783:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-journald" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386590535.783:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-journald" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386590535.784:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-journald" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386590535.795:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-journal-flush" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386590535.795:48): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-journal-flush" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386590536.330:49): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="network" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386590536.330:50): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="network" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1386590537.756:51): dev=eno1 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1386590537.756:51): arch=c000003e syscall=16 success=yes exit=0 a0=3 a1=89a2 a2=7fff77ff8140 a3=7fff77ff7ed0 items=0 ppid=3033 pid=3066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="brctl" exe="/usr/sbin/brctl" subj=system_u:system_r:brctl_t:s0 key=(null) >type=USER_CMD msg=audit(1386590537.889:52): pid=3065 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7362696E2F6C766D2064756D70636F6E66696720676C6F62616C2F6C6F636B696E675F74797065 terminal=? res=success' >type=CRED_ACQ msg=audit(1386590537.890:53): pid=3065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1386590537.891:54): pid=3065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1386590537.929:55): pid=3065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1386590537.930:56): pid=3065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1386590538.439:57): pid=3103 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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termi' >type=CRED_ACQ msg=audit(1386590538.439:58): pid=3103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1386590538.439:59): pid=3103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1386590538.514:60): pid=3103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1386590538.514:61): pid=3103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1386590538.605:62): pid=3114 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1386590538.606:63): pid=3114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1386590538.606:64): pid=3114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1386590538.663:65): pid=3114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1386590538.663:66): pid=3114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1386590538.738:67): pid=3118 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=CRED_ACQ msg=audit(1386590538.738:68): pid=3118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1386590538.739:69): pid=3118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1386590538.794:70): pid=3118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1386590538.795:71): pid=3118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1386590538.841:72): pid=3121 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1386590538.841:73): pid=3121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1386590538.841:74): pid=3121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1386590538.882:75): pid=3121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1386590538.882:76): pid=3121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386590540.065:77): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="network" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386590540.281:78): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="ovirt-post" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386590540.285:79): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1386590540.924:80): pid=3212 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1386590540.925:81): pid=3212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1386590540.925:82): pid=3212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1386590540.980:83): pid=3212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1386590540.980:84): pid=3212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386590558.056:85): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="ntpdate" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386590558.062:86): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="crond" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386590558.172:87): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="ntpd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SYSTEM_BOOT msg=audit(1386590558.184:88): pid=3249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='init exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' >type=SYSTEM_RUNLEVEL msg=audit(1386590558.190:89): pid=3249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='old-level=N new-level=3 exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386590558.194:90): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-update-utmp-runlevel" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386590558.194:91): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-update-utmp-runlevel" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1386590580.187:92): pid=3198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=failed' >type=AVC msg=audit(1386590580.187:93): avc: denied { lock } for pid=3198 comm="login" path="/var/log/btmp" dev="dm-8" ino=15 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1386590580.187:93): arch=c000003e syscall=72 success=no exit=-13 a0=4 a1=7 a2=7ffff492d170 a3=8 items=0 ppid=1 pid=3198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=tty1 comm="login" exe="/usr/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_LOGIN msg=audit(1386590580.188:94): pid=3198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=failed' >type=USER_AUTH msg=audit(1386590583.879:95): pid=3198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="admin" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success' >type=USER_ACCT msg=audit(1386590583.883:96): pid=3198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="admin" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success' >type=CRED_ACQ msg=audit(1386590583.884:97): pid=3198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="admin" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success' >type=LOGIN msg=audit(1386590583.884:98): login pid=3198 uid=0 old auid=4294967295 new auid=1000 old ses=4294967295 new ses=1 >type=USER_ROLE_CHANGE msg=audit(1386590584.004:99): pid=3198 uid=0 auid=1000 ses=1 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success' >type=AVC msg=audit(1386590584.023:100): avc: denied { read } for pid=3198 comm="login" name="btmp" dev="dm-8" ino=15 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1386590584.023:100): arch=c000003e syscall=2 success=no exit=-13 a0=7fea20e7131a a1=0 a2=5 a3=0 items=1 ppid=1 pid=3198 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1 tty=tty1 comm="login" exe="/usr/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=CWD msg=audit(1386590584.023:100): cwd="/" >type=PATH msg=audit(1386590584.023:100): item=0 name="/var/log/btmp" inode=15 dev=fd:08 mode=0100600 ouid=0 ogid=22 rdev=00:00 obj=system_u:object_r:var_log_t:s0 >type=USER_START msg=audit(1386590584.023:101): pid=3198 uid=0 auid=1000 ses=1 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="admin" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success' >type=CRED_REFR msg=audit(1386590584.023:102): pid=3198 uid=0 auid=1000 ses=1 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="admin" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success' >type=AVC msg=audit(1386590584.024:103): avc: denied { lock } for pid=3198 comm="login" path="/var/log/wtmp" dev="dm-8" ino=38 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1386590584.024:103): arch=c000003e syscall=72 success=no exit=-13 a0=4 a1=7 a2=7ffff492d330 a3=8 items=0 ppid=1 pid=3198 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=1000 fsgid=0 ses=1 tty=tty1 comm="login" exe="/usr/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_LOGIN msg=audit(1386590584.024:104): pid=3198 uid=0 auid=1000 ses=1 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success' >type=USER_CMD msg=audit(1386590584.081:105): pid=3276 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/admin" cmd=646D657367202D6E2031 terminal=tty1 res=success' >type=CRED_ACQ msg=audit(1386590584.082:106): pid=3276 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/tty1 res=success' >type=USER_START msg=audit(1386590584.085:107): pid=3276 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/tty1 res=success' >type=USER_END msg=audit(1386590584.099:108): pid=3276 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/tty1 res=success' >type=CRED_DISP msg=audit(1386590584.099:109): pid=3276 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/tty1 res=success' >type=USER_CMD msg=audit(1386590584.113:110): pid=3281 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/admin" cmd="/usr/bin/ovirt-node-setup" terminal=tty1 res=success' >type=CRED_ACQ msg=audit(1386590584.114:111): pid=3281 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/tty1 res=success' >type=USER_START msg=audit(1386590584.114:112): pid=3281 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/tty1 res=success' >type=SERVICE_START msg=audit(1386590588.212:113): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-readahead-done" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386590588.212:114): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-readahead-done" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1386590631.494:115): pid=2630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=destroy kind=server fp=40:91:dd:53:a4:66:d8:a3:e3:42:15:22:27:ba:07:77 direction=? spid=2630 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1386590631.494:116): pid=2630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=destroy kind=server fp=6f:62:94:d9:a9:dd:86:1d:d2:30:e4:6d:96:02:10:33 direction=? spid=2630 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1386590631.494:117): pid=2630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=destroy kind=server fp=80:94:c1:7b:a3:ba:e8:d9:f0:7f:99:47:af:f5:43:c5 direction=? spid=2630 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386590631.502:118): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sshd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386590631.519:119): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sshd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SYSCALL msg=audit(1386590631.665:120): arch=c000003e syscall=2 success=yes exit=4 a0=7fff855c3e94 a1=201 a2=0 a3=7fff855c2e10 items=1 ppid=3333 pid=3334 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1 tty=tty1 comm="cp" exe="/usr/bin/cp" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CWD msg=audit(1386590631.665:120): cwd="/home/admin" >type=PATH msg=audit(1386590631.665:120): item=0 name="/etc/shadow" inode=19135 dev=00:22 mode=0100000 ouid=0 ogid=0 rdev=00:00 obj=unconfined_u:object_r:shadow_t:s0 >type=SYSCALL msg=audit(1386590631.665:121): arch=c000003e syscall=190 success=yes exit=0 a0=4 a1=7f807977c3be a2=149aa00 a3=22 items=1 ppid=3333 pid=3334 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1 tty=tty1 comm="cp" exe="/usr/bin/cp" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=PATH msg=audit(1386590631.665:121): item=0 name=(null) inode=19135 dev=00:22 mode=0100000 ouid=0 ogid=0 rdev=00:00 obj=unconfined_u:object_r:shadow_t:s0 >type=SYSCALL msg=audit(1386590631.665:122): arch=c000003e syscall=190 success=yes exit=0 a0=4 a1=7fff855c2f60 a2=149a8f0 a3=22 items=1 ppid=3333 pid=3334 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1 tty=tty1 comm="cp" exe="/usr/bin/cp" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=PATH msg=audit(1386590631.665:122): item=0 name=(null) inode=19135 dev=00:22 mode=0100000 ouid=0 ogid=0 rdev=00:00 obj=unconfined_u:object_r:shadow_t:s0 >type=SYSCALL msg=audit(1386590631.665:123): arch=c000003e syscall=190 success=yes exit=0 a0=4 a1=7f8079560d0f a2=149a8f0 a3=1c items=1 ppid=3333 pid=3334 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1 tty=tty1 comm="cp" exe="/usr/bin/cp" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=PATH msg=audit(1386590631.665:123): item=0 name=(null) inode=19135 dev=00:22 mode=0100000 ouid=0 ogid=0 rdev=00:00 obj=unconfined_u:object_r:shadow_t:s0 >type=SYSCALL msg=audit(1386590631.666:124): arch=c000003e syscall=2 success=yes exit=11 a0=2a1fd00 a1=2 a2=7f8879d3a790 a3=0 items=1 ppid=3282 pid=3284 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1 tty=tty1 comm="python" exe="/usr/bin/python2.7" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CWD msg=audit(1386590631.666:124): cwd="/home/admin" >type=PATH msg=audit(1386590631.666:124): item=0 name="/etc/shadow" inode=19135 dev=00:22 mode=0100000 ouid=0 ogid=0 rdev=00:00 obj=unconfined_u:object_r:shadow_t:s0 >type=SYSCALL msg=audit(1386590631.667:125): arch=c000003e syscall=2 success=yes exit=11 a0=323b140 a1=2 a2=7f8879d3a790 a3=0 items=1 ppid=3282 pid=3284 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1 tty=tty1 comm="python" exe="/usr/bin/python2.7" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CWD msg=audit(1386590631.667:125): cwd="/home/admin" >type=PATH msg=audit(1386590631.667:125): item=0 name="/etc/shadow" inode=19135 dev=00:22 mode=0100000 ouid=0 ogid=0 rdev=00:00 obj=unconfined_u:object_r:shadow_t:s0 >type=SERVICE_START msg=audit(1386590640.331:126): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="getty@tty2" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1386590644.770:127): pid=3346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty2 res=failed' >type=AVC msg=audit(1386590644.771:128): avc: denied { lock } for pid=3346 comm="login" path="/var/log/btmp" dev="dm-8" ino=15 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1386590644.771:128): arch=c000003e syscall=72 success=no exit=-13 a0=4 a1=7 a2=7ffffaa70e00 a3=8 items=0 ppid=1 pid=3346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=tty2 comm="login" exe="/usr/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_LOGIN msg=audit(1386590644.771:129): pid=3346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/bin/login" hostname=? addr=? terminal=tty2 res=failed' >type=USER_AUTH msg=audit(1386590652.030:130): pid=3346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty2 res=failed' >type=AVC msg=audit(1386590652.030:131): avc: denied { lock } for pid=3346 comm="login" path="/var/log/btmp" dev="dm-8" ino=15 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1386590652.030:131): arch=c000003e syscall=72 success=no exit=-13 a0=4 a1=7 a2=7ffffaa70e00 a3=8 items=0 ppid=1 pid=3346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=tty2 comm="login" exe="/usr/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_LOGIN msg=audit(1386590652.030:132): pid=3346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/bin/login" hostname=? addr=? terminal=tty2 res=failed' >type=SERVICE_START msg=audit(1386590662.298:133): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-localed" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SYSCALL msg=audit(1386590680.525:134): arch=c000003e syscall=2 success=yes exit=4 a0=7fff99192e94 a1=201 a2=0 a3=7fff99191160 items=1 ppid=3367 pid=3368 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1 tty=tty1 comm="cp" exe="/usr/bin/cp" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CWD msg=audit(1386590680.525:134): cwd="/home/admin" >type=PATH msg=audit(1386590680.525:134): item=0 name="/etc/shadow" inode=19135 dev=00:22 mode=0100000 ouid=0 ogid=0 rdev=00:00 obj=unconfined_u:object_r:shadow_t:s0 >type=SYSCALL msg=audit(1386590680.525:135): arch=c000003e syscall=190 success=yes exit=0 a0=4 a1=7f7b8f2663be a2=1f24a00 a3=22 items=1 ppid=3367 pid=3368 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1 tty=tty1 comm="cp" exe="/usr/bin/cp" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=PATH msg=audit(1386590680.525:135): item=0 name=(null) inode=19135 dev=00:22 mode=0100000 ouid=0 ogid=0 rdev=00:00 obj=unconfined_u:object_r:shadow_t:s0 >type=SYSCALL msg=audit(1386590680.525:136): arch=c000003e syscall=190 success=yes exit=0 a0=4 a1=7fff991912b0 a2=1f248f0 a3=22 items=1 ppid=3367 pid=3368 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1 tty=tty1 comm="cp" exe="/usr/bin/cp" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=PATH msg=audit(1386590680.525:136): item=0 name=(null) inode=19135 dev=00:22 mode=0100000 ouid=0 ogid=0 rdev=00:00 obj=unconfined_u:object_r:shadow_t:s0 >type=SYSCALL msg=audit(1386590680.525:137): arch=c000003e syscall=190 success=yes exit=0 a0=4 a1=7f7b8f04ad0f a2=1f248f0 a3=1c items=1 ppid=3367 pid=3368 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1 tty=tty1 comm="cp" exe="/usr/bin/cp" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=PATH msg=audit(1386590680.525:137): item=0 name=(null) inode=19135 dev=00:22 mode=0100000 ouid=0 ogid=0 rdev=00:00 obj=unconfined_u:object_r:shadow_t:s0 >type=SYSCALL msg=audit(1386590680.527:138): arch=c000003e syscall=2 success=yes exit=13 a0=1d7f1e0 a1=2 a2=7f8879d3a790 a3=0 items=1 ppid=3282 pid=3284 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1 tty=tty1 comm="python" exe="/usr/bin/python2.7" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CWD msg=audit(1386590680.527:138): cwd="/home/admin" >type=PATH msg=audit(1386590680.527:138): item=0 name="/etc/shadow" inode=19135 dev=00:22 mode=0100000 ouid=0 ogid=0 rdev=00:00 obj=unconfined_u:object_r:shadow_t:s0 >type=SYSCALL msg=audit(1386590680.529:139): arch=c000003e syscall=2 success=yes exit=13 a0=19dd4f0 a1=2 a2=7f8879d3a790 a3=0 items=1 ppid=3282 pid=3284 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1 tty=tty1 comm="python" exe="/usr/bin/python2.7" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CWD msg=audit(1386590680.529:139): cwd="/home/admin" >type=PATH msg=audit(1386590680.529:139): item=0 name="/etc/shadow" inode=19135 dev=00:22 mode=0100000 ouid=0 ogid=0 rdev=00:00 obj=unconfined_u:object_r:shadow_t:s0 >type=CRYPTO_KEY_USER msg=audit(1386590680.669:140): pid=3323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=destroy kind=server fp=40:91:dd:53:a4:66:d8:a3:e3:42:15:22:27:ba:07:77 direction=? spid=3323 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1386590680.669:141): pid=3323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=destroy kind=server fp=6f:62:94:d9:a9:dd:86:1d:d2:30:e4:6d:96:02:10:33 direction=? spid=3323 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1386590680.669:142): pid=3323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=destroy kind=server fp=80:94:c1:7b:a3:ba:e8:d9:f0:7f:99:47:af:f5:43:c5 direction=? spid=3323 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386590680.676:143): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sshd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386590680.701:144): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sshd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386590682.218:145): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsm-reg" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USYS_CONFIG msg=audit(1386590683.080:146): pid=3429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time exe="/usr/sbin/hwclock" hostname=? addr=? terminal=? res=success' >type=USYS_CONFIG msg=audit(1386590683.000:147): pid=3431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time exe="/usr/sbin/hwclock" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386590683.179:148): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsm-reg" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1386590687.606:149): pid=3443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=destroy kind=server fp=40:91:dd:53:a4:66:d8:a3:e3:42:15:22:27:ba:07:77 direction=? spid=3443 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1386590687.606:150): pid=3443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=destroy kind=server fp=6f:62:94:d9:a9:dd:86:1d:d2:30:e4:6d:96:02:10:33 direction=? spid=3443 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1386590687.606:151): pid=3443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=destroy kind=server fp=80:94:c1:7b:a3:ba:e8:d9:f0:7f:99:47:af:f5:43:c5 direction=? spid=3443 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1386590687.609:152): pid=3442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=destroy kind=server fp=40:91:dd:53:a4:66:d8:a3:e3:42:15:22:27:ba:07:77 direction=? spid=3442 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1386590687.609:153): pid=3442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=destroy kind=server fp=6f:62:94:d9:a9:dd:86:1d:d2:30:e4:6d:96:02:10:33 direction=? spid=3442 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1386590687.609:154): pid=3442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=destroy kind=server fp=80:94:c1:7b:a3:ba:e8:d9:f0:7f:99:47:af:f5:43:c5 direction=? spid=3442 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=? res=success' >type=USER_LOGIN msg=audit(1386590687.610:155): pid=3442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=login acct=28756E6B6E6F776E207573657229 exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1386590700.318:156): pid=3346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty2 res=success' >type=USER_ACCT msg=audit(1386590700.322:157): pid=3346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty2 res=success' >type=CRED_ACQ msg=audit(1386590700.323:158): pid=3346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty2 res=success' >type=LOGIN msg=audit(1386590700.323:159): login pid=3346 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2 >type=USER_ROLE_CHANGE msg=audit(1386590700.422:160): pid=3346 uid=0 auid=0 ses=2 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/bin/login" hostname=? addr=? terminal=tty2 res=success' >type=AVC msg=audit(1386590700.437:161): avc: denied { read } for pid=3346 comm="login" name="btmp" dev="dm-8" ino=15 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1386590700.437:161): arch=c000003e syscall=2 success=no exit=-13 a0=7f1b7c44231a a1=0 a2=4 a3=0 items=1 ppid=1 pid=3346 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=2 tty=tty2 comm="login" exe="/usr/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=CWD msg=audit(1386590700.437:161): cwd="/" >type=PATH msg=audit(1386590700.437:161): item=0 name="/var/log/btmp" inode=15 dev=fd:08 mode=0100600 ouid=0 ogid=22 rdev=00:00 obj=system_u:object_r:var_log_t:s0 >type=USER_START msg=audit(1386590700.437:162): pid=3346 uid=0 auid=0 ses=2 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty2 res=success' >type=CRED_REFR msg=audit(1386590700.437:163): pid=3346 uid=0 auid=0 ses=2 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty2 res=success' >type=AVC msg=audit(1386590700.438:164): avc: denied { lock } for pid=3346 comm="login" path="/var/log/wtmp" dev="dm-8" ino=38 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1386590700.438:164): arch=c000003e syscall=72 success=no exit=-13 a0=4 a1=7 a2=7ffffaa70fc0 a3=8 items=0 ppid=1 pid=3346 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=2 tty=tty2 comm="login" exe="/usr/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_LOGIN msg=audit(1386590700.438:165): pid=3346 uid=0 auid=0 ses=2 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/bin/login" hostname=? addr=? terminal=tty2 res=success' >type=SERVICE_STOP msg=audit(1386590961.924:166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-localed" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1386591001.164:167): pid=3551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1386591001.165:168): pid=3552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1386591001.165:169): pid=3550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386591001.165:170): pid=3551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386591001.165:171): pid=3552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386591001.165:172): pid=3550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386591001.167:173): login pid=3552 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3 >type=LOGIN msg=audit(1386591001.167:174): login pid=3551 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4 >type=LOGIN msg=audit(1386591001.167:175): login pid=3550 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=5 >type=USER_START msg=audit(1386591001.181:176): pid=3552 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_START msg=audit(1386591001.181:177): pid=3550 uid=0 auid=0 ses=5 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386591001.182:178): pid=3550 uid=0 auid=0 ses=5 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386591001.182:179): pid=3552 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_START msg=audit(1386591001.182:180): pid=3551 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386591001.183:181): pid=3551 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386591001.202:182): pid=3551 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386591001.205:183): pid=3551 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386591001.214:184): pid=3552 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386591001.216:185): pid=3552 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386591001.226:186): pid=3550 uid=0 auid=0 ses=5 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386591001.228:187): pid=3550 uid=0 auid=0 ses=5 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=MAC_STATUS msg=audit(1386591055.543:188): enforcing=0 old_enforcing=1 auid=0 ses=2 >type=SYSCALL msg=audit(1386591055.543:188): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff9418c460 a2=1 a3=7fff9418c220 items=0 ppid=3451 pid=3577 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=2 tty=tty2 comm="setenforce" exe="/usr/sbin/setenforce" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1386591061.858:189): pid=3581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=destroy kind=server fp=40:91:dd:53:a4:66:d8:a3:e3:42:15:22:27:ba:07:77 direction=? spid=3581 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1386591061.858:190): pid=3581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=destroy kind=server fp=6f:62:94:d9:a9:dd:86:1d:d2:30:e4:6d:96:02:10:33 direction=? spid=3581 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1386591061.859:191): pid=3581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=destroy kind=server fp=80:94:c1:7b:a3:ba:e8:d9:f0:7f:99:47:af:f5:43:c5 direction=? spid=3581 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1386591061.860:192): pid=3580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 spid=3581 suid=74 rport=51567 laddr=10.48.32.33 lport=2 exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1386591061.861:193): pid=3580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 spid=3581 suid=74 rport=51567 laddr=10.48.32.33 lport=2 exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=? res=success' >type=USER_AUTH msg=audit(1386591065.386:194): pid=3580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.48.32.13 addr=10.48.32.13 terminal=ssh res=success' >type=USER_ACCT msg=audit(1386591065.391:195): pid=3580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.48.32.13 addr=10.48.32.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1386591065.392:196): pid=3580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=destroy kind=session fp=? direction=both spid=3581 suid=74 rport=51567 laddr=10.48.32.33 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=? res=success' >type=AVC msg=audit(1386591065.393:197): avc: denied { sigchld } for pid=3580 comm="sshd" scontext=system_u:system_r:sshd_net_t:s0 tcontext=system_u:system_r:initrc_t:s0 tclass=process >type=SYSCALL msg=audit(1386591065.393:197): arch=c000003e syscall=61 success=yes exit=3581 a0=dfd a1=7fffc395ad30 a2=0 a3=0 items=0 ppid=3390 pid=3580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=USER_AUTH msg=audit(1386591065.393:198): pid=3580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1386591065.394:199): pid=3580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.48.32.13 addr=10.48.32.13 terminal=ssh res=success' >type=LOGIN msg=audit(1386591065.394:200): login pid=3580 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=6 >type=USER_ROLE_CHANGE msg=audit(1386591065.565:201): pid=3580 uid=0 auid=0 ses=6 subj=system_u:system_r:initrc_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0 selected-context=unconfined_u:unconfined_r:unconfined_t:s0 exe="/usr/sbin/sshd" hostname=10.48.32.13 addr=10.48.32.13 terminal=ssh res=success' >type=USER_START msg=audit(1386591065.580:202): pid=3580 uid=0 auid=0 ses=6 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.48.32.13 addr=10.48.32.13 terminal=ssh res=success' >type=AVC msg=audit(1386591065.580:203): avc: denied { dyntransition } for pid=3580 comm="sshd" scontext=system_u:system_r:initrc_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0 tclass=process >type=SYSCALL msg=audit(1386591065.580:203): arch=c000003e syscall=1 success=yes exit=42 a0=5 a1=7f9306bf61e0 a2=2a a3=666e6f636e753a72 items=0 ppid=3390 pid=3580 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=6 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=unconfined_u:unconfined_r:unconfined_t:s0 key=(null) >type=USER_LOGIN msg=audit(1386591065.596:204): pid=3584 uid=0 auid=0 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.48.32.13 addr=10.48.32.13 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1386591065.596:205): pid=3584 uid=0 auid=0 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.48.32.13 addr=10.48.32.13 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1386591065.597:206): pid=3584 uid=0 auid=0 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0 msg='op=destroy kind=server fp=40:91:dd:53:a4:66:d8:a3:e3:42:15:22:27:ba:07:77 direction=? spid=3584 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1386591065.597:207): pid=3584 uid=0 auid=0 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0 msg='op=destroy kind=server fp=6f:62:94:d9:a9:dd:86:1d:d2:30:e4:6d:96:02:10:33 direction=? spid=3584 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1386591065.597:208): pid=3584 uid=0 auid=0 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0 msg='op=destroy kind=server fp=80:94:c1:7b:a3:ba:e8:d9:f0:7f:99:47:af:f5:43:c5 direction=? spid=3584 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1386591065.598:209): pid=3584 uid=0 auid=0 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.48.32.13 addr=10.48.32.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1386591188.290:210): pid=3634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=destroy kind=server fp=40:91:dd:53:a4:66:d8:a3:e3:42:15:22:27:ba:07:77 direction=? spid=3634 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1386591188.291:211): pid=3634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=destroy kind=server fp=6f:62:94:d9:a9:dd:86:1d:d2:30:e4:6d:96:02:10:33 direction=? spid=3634 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1386591188.291:212): pid=3634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=destroy kind=server fp=80:94:c1:7b:a3:ba:e8:d9:f0:7f:99:47:af:f5:43:c5 direction=? spid=3634 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1386591188.292:213): pid=3633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=start direction=from-client cipher=aes128-cbc ksize=128 mac=hmac-md5 spid=3634 suid=74 rport=51569 laddr=10.48.32.33 lport=2 exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1386591188.293:214): pid=3633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=start direction=from-server cipher=aes128-cbc ksize=128 mac=hmac-md5 spid=3634 suid=74 rport=51569 laddr=10.48.32.33 lport=2 exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=? res=success' >type=USER_AUTH msg=audit(1386591188.455:215): pid=3633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=pubkey_auth rport=51569 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=? res=success' >type=USER_AUTH msg=audit(1386591188.455:216): pid=3633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=key algo=ssh-rsa size=2048 fp=ed:30:a7:c6:9e:5a:fe:0c:78:76:d6:2c:4a:71:da:19 rport=51569 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=? res=success' >type=USER_ACCT msg=audit(1386591188.461:217): pid=3633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.48.32.13 addr=10.48.32.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1386591188.461:218): pid=3633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=destroy kind=session fp=? direction=both spid=3634 suid=74 rport=51569 laddr=10.48.32.33 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=? res=success' >type=AVC msg=audit(1386591188.463:219): avc: denied { sigchld } for pid=3633 comm="sshd" scontext=system_u:system_r:sshd_net_t:s0 tcontext=system_u:system_r:initrc_t:s0 tclass=process >type=SYSCALL msg=audit(1386591188.463:219): arch=c000003e syscall=61 success=yes exit=3634 a0=e32 a1=7fff360a4080 a2=0 a3=0 items=0 ppid=3390 pid=3633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=USER_AUTH msg=audit(1386591188.463:220): pid=3633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1386591188.463:221): pid=3633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.48.32.13 addr=10.48.32.13 terminal=ssh res=success' >type=LOGIN msg=audit(1386591188.463:222): login pid=3633 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=7 >type=USER_ROLE_CHANGE msg=audit(1386591188.652:223): pid=3633 uid=0 auid=0 ses=7 subj=system_u:system_r:initrc_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0 selected-context=unconfined_u:unconfined_r:unconfined_t:s0 exe="/usr/sbin/sshd" hostname=10.48.32.13 addr=10.48.32.13 terminal=ssh res=success' >type=USER_START msg=audit(1386591188.669:224): pid=3633 uid=0 auid=0 ses=7 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.48.32.13 addr=10.48.32.13 terminal=ssh res=success' >type=AVC msg=audit(1386591188.669:225): avc: denied { dyntransition } for pid=3633 comm="sshd" scontext=system_u:system_r:initrc_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0 tclass=process >type=SYSCALL msg=audit(1386591188.669:225): arch=c000003e syscall=1 success=yes exit=42 a0=5 a1=7f0177a27c30 a2=2a a3=666e6f636e753a72 items=0 ppid=3390 pid=3633 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=7 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=unconfined_u:unconfined_r:unconfined_t:s0 key=(null) >type=USER_LOGIN msg=audit(1386591188.676:226): pid=3633 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.48.32.13 addr=10.48.32.13 terminal=ssh res=success' >type=USER_START msg=audit(1386591188.676:227): pid=3633 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.48.32.13 addr=10.48.32.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1386591188.678:228): pid=3636 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0 msg='op=destroy kind=server fp=40:91:dd:53:a4:66:d8:a3:e3:42:15:22:27:ba:07:77 direction=? spid=3636 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1386591188.678:229): pid=3636 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0 msg='op=destroy kind=server fp=6f:62:94:d9:a9:dd:86:1d:d2:30:e4:6d:96:02:10:33 direction=? spid=3636 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1386591188.679:230): pid=3636 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0 msg='op=destroy kind=server fp=80:94:c1:7b:a3:ba:e8:d9:f0:7f:99:47:af:f5:43:c5 direction=? spid=3636 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=? res=success' >type=CRED_REFR msg=audit(1386591188.680:231): pid=3636 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.48.32.13 addr=10.48.32.13 terminal=ssh res=success' >type=USER_AVC msg=audit(1386591190.236:232): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received setenforce notice (enforcing=0) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=SERVICE_STOP msg=audit(1386591201.111:233): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386591201.139:234): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="supervdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386591201.139:235): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="supervdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USYS_CONFIG msg=audit(1386591202.499:236): pid=3679 uid=0 auid=0 ses=7 subj=unconfined_u:system_r:unconfined_t:s0 msg='changing system time exe="/usr/sbin/hwclock" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386591211.786:237): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsm-restore-net-config" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386591211.786:238): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsm-restore-net-config" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386591211.801:239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="libvirtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386591211.801:240): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="libvirtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386591211.974:241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="libvirtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386591212.147:242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="supervdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386591222.220:243): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1386591223.382:244): pid=4341 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7362696E2F6C766D2064756D70636F6E66696720676C6F62616C2F6C6F636B696E675F74797065 terminal=? res=success' >type=CRED_ACQ msg=audit(1386591223.383:245): pid=4341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1386591223.385:246): pid=4341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1386591223.423:247): pid=4341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1386591223.423:248): pid=4341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1386591223.974:249): pid=4366 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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termi' >type=CRED_ACQ msg=audit(1386591223.975:250): pid=4366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1386591223.975:251): pid=4366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1386591224.037:252): pid=4366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1386591224.038:253): pid=4366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1386591224.120:254): pid=4377 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303862313030316366663837366261646533366365346431366536637C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F' >type=CRED_ACQ msg=audit(1386591224.121:255): pid=4377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1386591224.121:256): pid=4377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1386591224.178:257): pid=4377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1386591224.178:258): pid=4377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1386591224.263:259): pid=4381 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=CRED_ACQ msg=audit(1386591224.264:260): pid=4381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1386591224.265:261): pid=4381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1386591224.311:262): pid=3633 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.48.32.13 addr=10.48.32.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1386591224.311:263): pid=3633 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.48.32.13 addr=10.48.32.13 terminal=ssh res=success' >type=USER_END msg=audit(1386591224.319:264): pid=4381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1386591224.319:265): pid=4381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1386591224.365:266): pid=4386 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1386591224.366:267): pid=4386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1386591224.366:268): pid=4386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1386591224.371:269): pid=4386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1386591224.372:270): pid=4386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1386591225.293:271): pid=3633 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.48.32.13 addr=10.48.32.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1386591225.294:272): pid=3633 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.48.32.13 addr=10.48.32.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1386591225.298:273): pid=3633 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0 msg='op=destroy kind=session fp=? direction=both spid=3633 suid=0 rport=51569 laddr=10.48.32.33 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1386591225.298:274): pid=3633 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0 msg='op=destroy kind=server fp=40:91:dd:53:a4:66:d8:a3:e3:42:15:22:27:ba:07:77 direction=? spid=3633 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1386591225.298:275): pid=3633 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0 msg='op=destroy kind=server fp=6f:62:94:d9:a9:dd:86:1d:d2:30:e4:6d:96:02:10:33 direction=? spid=3633 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1386591225.298:276): pid=3633 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0 msg='op=destroy kind=server fp=80:94:c1:7b:a3:ba:e8:d9:f0:7f:99:47:af:f5:43:c5 direction=? spid=3633 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=? res=success' >type=USER_CMD msg=audit(1386591226.414:277): pid=4397 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1386591226.414:278): pid=4397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1386591226.415:279): pid=4397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1386591226.485:280): pid=4397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1386591226.485:281): pid=4397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1386591410.817:282): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1386591410.817:283): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1386591601.993:284): pid=4683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1386591601.993:285): pid=4682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386591601.993:286): pid=4683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1386591601.994:287): pid=4682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1386591601.994:288): login pid=4683 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=8 >type=LOGIN msg=audit(1386591601.994:289): login pid=4682 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=9 >type=USER_START msg=audit(1386591602.008:290): pid=4683 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_START msg=audit(1386591602.009:291): pid=4682 uid=0 auid=0 ses=9 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386591602.009:292): pid=4683 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1386591602.009:293): pid=4682 uid=0 auid=0 ses=9 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1386591602.030:294): pid=4682 uid=0 auid=0 ses=9 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386591602.032:295): pid=4682 uid=0 auid=0 ses=9 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1386591602.039:296): avc: denied { open } for pid=4686 comm="sadc" path="/var/log/sa/sa09" dev="dm-8" ino=29 scontext=system_u:system_r:sysstat_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1386591602.039:296): arch=c000003e syscall=2 success=yes exit=3 a0=7fff5bee75f0 a1=402 a2=0 a3=7fff5bee7000 items=1 ppid=4683 pid=4686 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=8 tty=(none) comm="sadc" exe="/usr/lib64/sa/sadc" subj=system_u:system_r:sysstat_t:s0-s0:c0.c1023 key=(null) >type=CWD msg=audit(1386591602.039:296): cwd="/usr/lib64/sa" >type=PATH msg=audit(1386591602.039:296): item=0 name="/var/log/sa/sa09" inode=29 dev=fd:08 mode=0100644 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:var_log_t:s0 >type=CRED_DISP msg=audit(1386591602.066:297): pid=4683 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1386591602.069:298): pid=4683 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRYPTO_KEY_USER msg=audit(1386591718.561:299): pid=4770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=destroy kind=server fp=40:91:dd:53:a4:66:d8:a3:e3:42:15:22:27:ba:07:77 direction=? spid=4770 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1386591718.561:300): pid=4770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=destroy kind=server fp=6f:62:94:d9:a9:dd:86:1d:d2:30:e4:6d:96:02:10:33 direction=? spid=4770 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1386591718.561:301): pid=4770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=destroy kind=server fp=80:94:c1:7b:a3:ba:e8:d9:f0:7f:99:47:af:f5:43:c5 direction=? spid=4770 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1386591718.563:302): pid=4769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 spid=4770 suid=74 rport=51570 laddr=10.48.32.33 lport=2 exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1386591718.564:303): pid=4769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 spid=4770 suid=74 rport=51570 laddr=10.48.32.33 lport=2 exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=? res=success' >type=USER_AUTH msg=audit(1386591721.353:304): pid=4769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.48.32.13 addr=10.48.32.13 terminal=ssh res=success' >type=USER_ACCT msg=audit(1386591721.357:305): pid=4769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.48.32.13 addr=10.48.32.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1386591721.358:306): pid=4769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=destroy kind=session fp=? direction=both spid=4770 suid=74 rport=51570 laddr=10.48.32.33 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=? res=success' >type=AVC msg=audit(1386591721.359:307): avc: denied { sigchld } for pid=4769 comm="sshd" scontext=system_u:system_r:sshd_net_t:s0 tcontext=system_u:system_r:initrc_t:s0 tclass=process >type=SYSCALL msg=audit(1386591721.359:307): arch=c000003e syscall=61 success=yes exit=4770 a0=12a2 a1=7fffaa294120 a2=0 a3=0 items=0 ppid=3390 pid=4769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=USER_AUTH msg=audit(1386591721.360:308): pid=4769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1386591721.360:309): pid=4769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.48.32.13 addr=10.48.32.13 terminal=ssh res=success' >type=LOGIN msg=audit(1386591721.360:310): login pid=4769 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=10 >type=USER_ROLE_CHANGE msg=audit(1386591721.543:311): pid=4769 uid=0 auid=0 ses=10 subj=system_u:system_r:initrc_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0 selected-context=unconfined_u:unconfined_r:unconfined_t:s0 exe="/usr/sbin/sshd" hostname=10.48.32.13 addr=10.48.32.13 terminal=ssh res=success' >type=USER_START msg=audit(1386591721.558:312): pid=4769 uid=0 auid=0 ses=10 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.48.32.13 addr=10.48.32.13 terminal=ssh res=success' >type=AVC msg=audit(1386591721.558:313): avc: denied { dyntransition } for pid=4769 comm="sshd" scontext=system_u:system_r:initrc_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0 tclass=process >type=SYSCALL msg=audit(1386591721.558:313): arch=c000003e syscall=1 success=yes exit=42 a0=5 a1=7f91f2b651e0 a2=2a a3=666e6f636e753a72 items=0 ppid=3390 pid=4769 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=10 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=unconfined_u:unconfined_r:unconfined_t:s0 key=(null) >type=USER_LOGIN msg=audit(1386591721.564:314): pid=4769 uid=0 auid=0 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.48.32.13 addr=10.48.32.13 terminal=ssh res=success' >type=USER_START msg=audit(1386591721.564:315): pid=4769 uid=0 auid=0 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.48.32.13 addr=10.48.32.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1386591721.566:316): pid=4774 uid=0 auid=0 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0 msg='op=destroy kind=server fp=40:91:dd:53:a4:66:d8:a3:e3:42:15:22:27:ba:07:77 direction=? spid=4774 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1386591721.566:317): pid=4774 uid=0 auid=0 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0 msg='op=destroy kind=server fp=6f:62:94:d9:a9:dd:86:1d:d2:30:e4:6d:96:02:10:33 direction=? spid=4774 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1386591721.567:318): pid=4774 uid=0 auid=0 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0 msg='op=destroy kind=server fp=80:94:c1:7b:a3:ba:e8:d9:f0:7f:99:47:af:f5:43:c5 direction=? spid=4774 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.48.32.13 terminal=? res=success' >type=CRED_REFR msg=audit(1386591721.568:319): pid=4774 uid=0 auid=0 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.48.32.13 addr=10.48.32.13 terminal=ssh res=success'
<b>You cannot view the attachment while viewing its details because your browser does not support IFRAMEs. <a href="attachment.cgi?id=834319">View the attachment on a separate page</a>.</b>
View Attachment As Raw
Actions:
View
Attachments on
bug 1039563
: 834319