Attachment 849702 Details for Bug 1052770 – audit.log from affected system

audit.log from affected system

audit.log (text/x-log), 65.56 KB, created by Jason Montleon on 2014-01-14 02:49:25 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Jason Montleon

Created: 2014-01-14 02:49:25 UTC

Size: 65.56 KB

patch

obsolete

>type=DAEMON_START msg=audit(6.541:2541): auditd start, ver=2.3.2 format=raw kernel=3.13.0-0.rc7.git0.300.cubox_i4pro.fc20.armv7hl auid=4294967295 pid=200 subj=system_u:system_r:auditd_t:s0 res=success
>type=SYSTEM_BOOT msg=audit(6.626:13): pid=213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='init exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(6.640:14): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=AVC msg=audit(7.083:15): avc:  denied  { mmap_zero } for  pid=215 comm="firewalld" scontext=system_u:system_r:init_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=memprotect
>type=SYSCALL msg=audit(7.083:15): arch=40000028 syscall=11 per=800000 success=yes exit=0 a0=76f671d8 a1=770a8c38 a2=76f58990 a3=76f293a4 items=0 ppid=1 pid=215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="firewalld" exe="/usr/bin/python2.7" subj=system_u:system_r:firewalld_t:s0 key=(null)
>type=SERVICE_START msg=audit(7.129:16): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="irqbalance" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(7.151:17): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="smartd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(7.170:18): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rngd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(7.180:19): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="dbus" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(7.200:20): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-user-sessions" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(7.211:21): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="atd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(7.225:22): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="crond" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(7.272:23): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="plymouth-start" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(7.278:24): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="plymouth-quit" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(7.279:25): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="plymouth-quit" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(7.281:26): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="plymouth-quit-wait" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(7.281:27): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="plymouth-quit-wait" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(7.288:28): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="serial-getty@ttymxc0" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(7.294:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(7.505:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rngd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'
>type=SERVICE_START msg=audit(8.037:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rsyslog" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(8.288:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-logind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=AVC msg=audit(8.322:33): avc:  denied  { mmap_zero } for  pid=242 comm="chrony-helper" scontext=system_u:system_r:init_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=memprotect
>type=SYSCALL msg=audit(8.322:33): arch=40000028 syscall=11 per=800000 success=yes exit=0 a0=76f37d38 a1=76f8f910 a2=76f2af70 a3=76f293a4 items=0 ppid=1 pid=242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="chrony-helper" exe="/usr/bin/bash" subj=system_u:system_r:init_t:s0 key=(null)
>type=SERVICE_START msg=audit(8.649:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="chronyd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(9.067:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="ModemManager" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=AVC msg=audit(10.022:36): avc:  denied  { mmap_zero } for  pid=247 comm="iptables" scontext=system_u:system_r:firewalld_t:s0 tcontext=system_u:system_r:firewalld_t:s0 tclass=memprotect
>type=SYSCALL msg=audit(10.022:36): arch=40000028 syscall=11 per=800000 success=yes exit=0 a0=1c9708 a1=1c9720 a2=1aab98 a3=0 items=0 ppid=215 pid=247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null)
>type=AVC msg=audit(10.086:37): avc:  denied  { mmap_zero } for  pid=250 comm="modprobe" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=memprotect
>type=AVC msg=audit(10.220:38): avc:  denied  { mmap_zero } for  pid=269 comm="modprobe" scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:system_r:iptables_t:s0 tclass=memprotect
>type=SYSCALL msg=audit(10.220:38): arch=40000028 syscall=11 per=800000 success=yes exit=0 a0=73008 a1=7e969ac4 a2=7e969f18 a3=76e38bb8 items=0 ppid=268 pid=269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=FD_PAIR msg=audit(10.220:38): fd0=0 fd1=0
>type=SERVICE_START msg=audit(11.089:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="firewalld" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=NETFILTER_CFG msg=audit(11.093:40): table=filter family=2 entries=4
>type=SYSCALL msg=audit(11.093:40): arch=40000028 syscall=294 per=800000 success=yes exit=0 a0=3 a1=0 a2=40 a3=73568 items=0 ppid=215 pid=284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null)
>type=NETFILTER_CFG msg=audit(11.128:41): table=filter family=2 entries=4
>type=SYSCALL msg=audit(11.128:41): arch=40000028 syscall=294 per=800000 success=yes exit=0 a0=3 a1=0 a2=40 a3=73568 items=0 ppid=215 pid=287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null)
>type=NETFILTER_CFG msg=audit(11.144:42): table=filter family=2 entries=4
>type=SYSCALL msg=audit(11.144:42): arch=40000028 syscall=294 per=800000 success=yes exit=0 a0=3 a1=0 a2=40 a3=73568 items=0 ppid=215 pid=288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null)
>type=NETFILTER_CFG msg=audit(11.159:43): table=filter family=2 entries=4
>type=SYSCALL msg=audit(11.159:43): arch=40000028 syscall=294 per=800000 success=yes exit=0 a0=3 a1=0 a2=40 a3=73568 items=0 ppid=215 pid=289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null)
>type=NETFILTER_CFG msg=audit(11.176:44): table=filter family=2 entries=4
>type=SYSCALL msg=audit(11.176:44): arch=40000028 syscall=294 per=800000 success=yes exit=0 a0=3 a1=0 a2=40 a3=73568 items=0 ppid=215 pid=290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null)
>type=NETFILTER_CFG msg=audit(11.204:45): table=filter family=2 entries=4
>type=SYSCALL msg=audit(11.204:45): arch=40000028 syscall=294 per=800000 success=yes exit=0 a0=3 a1=0 a2=40 a3=73568 items=0 ppid=215 pid=291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null)
>type=NETFILTER_CFG msg=audit(11.220:46): table=filter family=2 entries=6
>type=SYSCALL msg=audit(11.220:46): arch=40000028 syscall=294 per=800000 success=yes exit=0 a0=3 a1=0 a2=40 a3=73728 items=0 ppid=215 pid=292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null)
>type=NETFILTER_CFG msg=audit(11.236:47): table=filter family=2 entries=8
>type=SYSCALL msg=audit(11.236:47): arch=40000028 syscall=294 per=800000 success=yes exit=0 a0=3 a1=0 a2=40 a3=738e8 items=0 ppid=215 pid=293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null)
>type=SERVICE_START msg=audit(12.340:48): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="polkit" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=AVC msg=audit(12.307:49): avc:  denied  { mmap_zero } for  pid=232 comm="agetty" scontext=system_u:system_r:init_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=memprotect
>type=AVC msg=audit(12.310:50): avc:  denied  { mmap_zero } for  pid=233 comm="agetty" scontext=system_u:system_r:init_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=memprotect
>type=SYSCALL msg=audit(12.310:50): arch=40000028 syscall=11 per=800000 success=yes exit=0 a0=77050df8 a1=76f846c0 a2=77091e80 a3=76f293a4 items=0 ppid=1 pid=233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="agetty" exe="/usr/sbin/agetty" subj=system_u:system_r:getty_t:s0-s0:c0.c1023 key=(null)
>type=SYSCALL msg=audit(12.307:49): arch=40000028 syscall=11 per=800000 success=yes exit=0 a0=770518f8 a1=76f89af8 a2=76fac3a0 a3=76f293a4 items=0 ppid=1 pid=232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="agetty" exe="/usr/sbin/agetty" subj=system_u:system_r:getty_t:s0-s0:c0.c1023 key=(null)
>type=SERVICE_START msg=audit(12.705:51): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="NetworkManager" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=AVC msg=audit(12.827:52): avc:  denied  { mmap_zero } for  pid=323 comm="rm" scontext=system_u:system_r:sshd_keygen_t:s0 tcontext=system_u:system_r:sshd_keygen_t:s0 tclass=memprotect
>type=SYSCALL msg=audit(12.827:52): arch=40000028 syscall=11 per=800000 success=yes exit=0 a0=e05e0 a1=dd4a0 a2=f9fb0 a3=30303300 items=0 ppid=322 pid=323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="rm" exe="/usr/bin/rm" subj=system_u:system_r:sshd_keygen_t:s0 key=(null)
>type=SERVICE_START msg=audit(12.899:53): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rpcbind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(13.467:54): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nfs-lock" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=AVC msg=audit(16.697:55): avc:  denied  { mmap_zero } for  pid=232 comm="login" scontext=system_u:system_r:getty_t:s0-s0:c0.c1023 tcontext=system_u:system_r:getty_t:s0-s0:c0.c1023 tclass=memprotect
>type=SYSCALL msg=audit(16.697:55): arch=40000028 syscall=11 per=800000 success=yes exit=0 a0=e750 a1=7eaea7bc a2=1ae68 a3=76f81bb8 items=0 ppid=1 pid=232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=ttymxc0 comm="login" exe="/usr/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=SERVICE_START msg=audit(18.669:56): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="NetworkManager-dispatcher" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=AVC msg=audit(18.687:57): avc:  denied  { mmap_zero } for  pid=339 comm="00-netreport" scontext=system_u:system_r:initrc_t:s0 tcontext=system_u:system_r:initrc_t:s0 tclass=memprotect
>type=SYSCALL msg=audit(18.687:57): arch=40000028 syscall=11 per=800000 success=yes exit=0 a0=76fa9cd0 a1=7ed7f7ac a2=76fa2530 a3=76fa2530 items=0 ppid=337 pid=339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="00-netreport" exe="/usr/bin/bash" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=USER_AUTH msg=audit(19.819:58): pid=232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=ttymxc0 res=success'
>type=USER_ACCT msg=audit(19.835:59): pid=232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=ttymxc0 res=success'
>type=CRED_ACQ msg=audit(19.840:60): pid=232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=ttymxc0 res=success'
>type=LOGIN msg=audit(19.841:61): pid=232 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1 res=1
>type=USER_ROLE_CHANGE msg=audit(20.329:62): pid=232 uid=0 auid=0 ses=1 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/bin/login" hostname=? addr=? terminal=ttymxc0 res=success'
>type=USER_START msg=audit(20.536:63): pid=232 uid=0 auid=0 ses=1 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=ttymxc0 res=success'
>type=CRED_REFR msg=audit(20.537:64): pid=232 uid=0 auid=0 ses=1 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=ttymxc0 res=success'
>type=USER_LOGIN msg=audit(20.546:65): pid=232 uid=0 auid=0 ses=1 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/bin/login" hostname=? addr=? terminal=ttymxc0 res=success'
>type=AVC msg=audit(20.550:66): avc:  denied  { mmap_zero } for  pid=380 comm="bash" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tclass=memprotect
>type=SYSCALL msg=audit(20.550:66): arch=40000028 syscall=11 per=800000 success=yes exit=0 a0=24d96 a1=7ef1dbd0 a2=28680 a3=9 items=0 ppid=232 pid=380 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1 tty=ttymxc0 comm="bash" exe="/usr/bin/bash" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(20.589:67): avc:  denied  { mmap_zero } for  pid=382 comm="id" scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=memprotect
>type=SYSCALL msg=audit(20.589:67): arch=40000028 syscall=11 per=800000 success=yes exit=0 a0=df280 a1=df410 a2=dcfd8 a3=e1c69400 items=0 ppid=381 pid=382 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1 tty=ttymxc0 comm="id" exe="/usr/bin/id" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(20.618:68): pid=377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(20.640:69): pid=377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(20.986:70): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="user@0" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=AVC msg=audit(21.615:71): avc:  denied  { mmap_zero } for  pid=402 comm="chgrp" scontext=system_u:system_r:sshd_keygen_t:s0 tcontext=system_u:system_r:sshd_keygen_t:s0 tclass=memprotect
>type=SYSCALL msg=audit(21.615:71): arch=40000028 syscall=11 per=800000 success=yes exit=0 a0=fa1a0 a1=dd6a8 a2=f9fb0 a3=30303300 items=0 ppid=322 pid=402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="chgrp" exe="/usr/bin/chgrp" subj=system_u:system_r:sshd_keygen_t:s0 key=(null)
>type=SERVICE_START msg=audit(21.849:72): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sshd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SYSTEM_BOOT msg=audit(21.886:73): pid=409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='init exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success'
>type=SYSTEM_RUNLEVEL msg=audit(21.897:74): pid=409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='old-level=N new-level=3 exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(21.907:75): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-update-utmp-runlevel" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(21.907:76): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-update-utmp-runlevel" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1389665078.801:77): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="NetworkManager-dispatcher" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389665100.745:78): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-readahead-done" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1389665100.745:79): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-readahead-done" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=MAC_CONFIG_CHANGE msg=audit(1389665198.443:80): bool=mmap_low_allowed val=1 old_val=0 auid=0 ses=1
>type=SYSCALL msg=audit(1389665198.443:80): arch=40000028 syscall=4 per=800000 success=yes exit=2 a0=4 a1=7ef559e0 a2=2 a3=7ef559e0 items=0 ppid=380 pid=417 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1 tty=ttymxc0 comm="setsebool" exe="/usr/sbin/setsebool" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=MAC_POLICY_LOAD msg=audit(1389665200.000:81): policy loaded auid=0 ses=1
>type=SYSCALL msg=audit(1389665200.000:81): arch=40000028 syscall=4 per=800000 success=yes exit=3186161 a0=4 a1=766cc008 a2=309df1 a3=0 items=0 ppid=417 pid=418 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1 tty=ttymxc0 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=MAC_POLICY_LOAD msg=audit(1389665299.378:82): policy loaded auid=0 ses=1
>type=SYSCALL msg=audit(1389665299.378:82): arch=40000028 syscall=4 per=800000 success=yes exit=3186173 a0=4 a1=76689008 a2=309dfd a3=0 items=0 ppid=423 pid=424 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1 tty=ttymxc0 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=MAC_POLICY_LOAD msg=audit(1389665406.336:83): policy loaded auid=0 ses=1
>type=SYSCALL msg=audit(1389665406.336:83): arch=40000028 syscall=4 per=800000 success=yes exit=3186197 a0=4 a1=7673d008 a2=309e15 a3=0 items=0 ppid=429 pid=430 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1 tty=ttymxc0 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=FS_RELABEL msg=audit(1389665565.116:84): pid=435 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=mass relabel exe="/usr/sbin/setfiles" hostname=? addr=? terminal=ttymxc0 res=success'
>type=SERVICE_START msg=audit(1389665567.222:85): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="packagekit" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1389665567.287:86): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="packagekit" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389665867.157:87): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="dnf-makecache" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1389665867.157:88): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="dnf-makecache" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389665948.865:89): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1389665948.865:90): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=USER_AVC msg=audit(1389666063.220:91): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc:  received policyload notice (seqno=2)  exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?'
>type=USER_AVC msg=audit(1389666063.220:92): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc:  received policyload notice (seqno=3)  exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?'
>type=USER_AVC msg=audit(1389666063.220:93): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc:  received policyload notice (seqno=4)  exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?'
>type=USER_AVC msg=audit(1389666063.220:94): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc:  received policyload notice (seqno=5)  exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?'
>type=SERVICE_STOP msg=audit(1389666063.248:95): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="crond" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666063.257:96): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="crond" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=ADD_USER msg=audit(1389666076.184:97): pid=808 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="dbus" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=failed'
>type=ADD_USER msg=audit(1389666076.184:98): pid=808 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="dbus" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=failed'
>type=CRYPTO_KEY_USER msg=audit(1389666545.687:99): pid=408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=10:72:00:43:c9:ed:9d:7d:b1:52:b3:3d:b4:85:57:aa direction=? spid=408 suid=0  exe=2F7573722F7362696E2F73736864202864656C6574656429 hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666545.696:100): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sshd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1389666545.696:101): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sshd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=AVC msg=audit(1389666546.083:102): avc:  denied  { mmap_zero } for  pid=1024 comm="rm" scontext=system_u:system_r:sshd_keygen_t:s0 tcontext=system_u:system_r:sshd_keygen_t:s0 tclass=memprotect
>type=SYSCALL msg=audit(1389666546.083:102): arch=40000028 syscall=11 per=800000 success=yes exit=0 a0=f95d8 a1=dd4c0 a2=f9fb0 a3=bbff9900 items=0 ppid=1023 pid=1024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="rm" exe="/usr/bin/rm" subj=system_u:system_r:sshd_keygen_t:s0 key=(null)
>type=SERVICE_START msg=audit(1389666546.267:103): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sshd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666564.392:104): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="lvm2-monitor" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1389666564.392:105): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="lvm2-monitor" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666564.452:106): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="lvm2-monitor" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666565.160:107): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="lvm2-lvmetad" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1389666565.160:108): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="lvm2-lvmetad" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666565.691:109): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="lvm2-lvmetad" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666571.242:110): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nfs-lock" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1389666571.242:111): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nfs-lock" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666571.251:112): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rpcbind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'
>type=SERVICE_START msg=audit(1389666571.291:113): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rpcbind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666571.623:114): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nfs-lock" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666657.394:115): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="atd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1389666657.394:116): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="atd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666657.728:117): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="atd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666824.714:118): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="packagekit" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1389666920.751:119): pid=1032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=10:72:00:43:c9:ed:9d:7d:b1:52:b3:3d:b4:85:57:aa direction=? spid=1032 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1389666920.752:120): pid=1032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:f9:c2:ec:ca:66:11:0b:aa:90:70:cf:dc:41:44:f5 direction=? spid=1032 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
>type=CRED_DISP msg=audit(1389666920.868:121): pid=232 uid=0 auid=0 ses=1 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=ttymxc0 res=success'
>type=SERVICE_START msg=audit(1389666920.883:122): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="firewalld" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'
>type=SERVICE_START msg=audit(1389666920.887:123): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rsyslog" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1389666920.887:124): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rsyslog" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666920.890:125): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="irqbalance" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1389666920.890:126): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="irqbalance" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666920.893:127): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="ModemManager" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1389666920.893:128): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="ModemManager" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666920.898:129): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="smartd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1389666920.898:130): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="smartd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666920.904:131): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="dbus" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1389666920.904:132): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="dbus" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666920.910:133): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-logind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'
>type=SERVICE_START msg=audit(1389666920.921:134): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1389666920.921:135): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666920.925:136): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="chronyd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1389666920.925:137): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="chronyd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666920.928:138): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="polkit" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1389666920.928:139): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="polkit" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666920.930:140): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="user@0" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1389666920.930:141): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="user@0" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666920.943:142): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="crond" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1389666920.943:143): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="crond" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666920.948:144): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sshd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1389666920.949:145): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sshd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666920.961:146): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="atd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1389666920.961:147): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="atd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1389666920.982:148): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="packagekit" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666921.005:149): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nfs-lock" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1389666921.005:150): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nfs-lock" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666921.055:151): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rpcbind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'
>type=USER_END msg=audit(1389666921.062:152): pid=232 uid=0 auid=0 ses=1 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=ttymxc0 res=failed'
>type=SERVICE_START msg=audit(1389666921.079:153): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="serial-getty@ttymxc0" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1389666921.079:154): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="serial-getty@ttymxc0" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666921.127:155): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="plymouth-reboot" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666921.132:156): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-user-sessions" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1389666921.132:157): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-user-sessions" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666921.304:158): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="NetworkManager" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1389666921.304:159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="NetworkManager" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666921.354:160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-vconsole-setup" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1389666921.354:161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-vconsole-setup" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666921.365:162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-sysctl" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1389666921.365:163): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-sysctl" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666921.408:164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-random-seed" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1389666921.408:165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-random-seed" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SYSTEM_SHUTDOWN msg=audit(1389666921.420:166): pid=8406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='init exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666921.431:167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=DAEMON_END msg=audit(1389666921.438:2542): auditd normal halt, sending auid=? pid=? subj=? res=success
>type=DAEMON_START msg=audit(1389666940.099:3762): auditd start, ver=2.3.2 format=raw kernel=3.13.0-0.rc7.git0.300.cubox_i4pro.fc20.armv7hl auid=4294967295 pid=201 subj=system_u:system_r:auditd_t:s0 res=success
>type=SERVICE_START msg=audit(1389666940.783:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="irqbalance" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666940.931:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="smartd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666940.943:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rngd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666940.952:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="dbus" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666940.970:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-user-sessions" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666941.003:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="atd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666941.120:11): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="crond" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1389666941.143:12): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rngd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'
>type=SERVICE_STOP msg=audit(1389666941.176:13): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="plymouth-start" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666941.178:14): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="plymouth-quit" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1389666941.179:15): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="plymouth-quit" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666941.181:16): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="plymouth-quit-wait" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1389666941.181:17): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="plymouth-quit-wait" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666941.188:18): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="serial-getty@ttymxc0" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666941.195:19): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666941.351:20): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rpcbind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666941.360:21): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rsyslog" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666941.703:22): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="chronyd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666942.348:23): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-logind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666942.916:24): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="ModemManager" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=AVC msg=audit(1389666943.156:25): avc:  denied  { mmap_zero } for  pid=260 comm="iptables" scontext=system_u:system_r:firewalld_t:s0 tcontext=system_u:system_r:firewalld_t:s0 tclass=memprotect
>type=SYSCALL msg=audit(1389666943.156:25): arch=40000028 syscall=11 per=800000 success=no exit=-13 a0=1c9cb8 a1=1c9cd0 a2=1c9d38 a3=0 items=0 ppid=216 pid=260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:firewalld_t:s0 key=(null)
>type=AVC msg=audit(1389666943.174:26): avc:  denied  { mmap_zero } for  pid=261 comm="iptables" scontext=system_u:system_r:firewalld_t:s0 tcontext=system_u:system_r:firewalld_t:s0 tclass=memprotect
>type=SYSCALL msg=audit(1389666943.174:26): arch=40000028 syscall=11 per=800000 success=no exit=-13 a0=1ca758 a1=1ca770 a2=1ca7d8 a3=0 items=0 ppid=216 pid=261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:firewalld_t:s0 key=(null)
>type=AVC msg=audit(1389666943.188:27): avc:  denied  { mmap_zero } for  pid=262 comm="iptables" scontext=system_u:system_r:firewalld_t:s0 tcontext=system_u:system_r:firewalld_t:s0 tclass=memprotect
>type=SYSCALL msg=audit(1389666943.188:27): arch=40000028 syscall=11 per=800000 success=no exit=-13 a0=1ca728 a1=1ca740 a2=1ca7a8 a3=0 items=0 ppid=216 pid=262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:firewalld_t:s0 key=(null)
>type=AVC msg=audit(1389666943.201:28): avc:  denied  { mmap_zero } for  pid=263 comm="iptables" scontext=system_u:system_r:firewalld_t:s0 tcontext=system_u:system_r:firewalld_t:s0 tclass=memprotect
>type=SYSCALL msg=audit(1389666943.201:28): arch=40000028 syscall=11 per=800000 success=no exit=-13 a0=1ca728 a1=1ca740 a2=1ca798 a3=0 items=0 ppid=216 pid=263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:firewalld_t:s0 key=(null)
>type=AVC msg=audit(1389666943.215:29): avc:  denied  { mmap_zero } for  pid=264 comm="iptables" scontext=system_u:system_r:firewalld_t:s0 tcontext=system_u:system_r:firewalld_t:s0 tclass=memprotect
>type=SYSCALL msg=audit(1389666943.215:29): arch=40000028 syscall=11 per=800000 success=no exit=-13 a0=1ca710 a1=1ca728 a2=1ca780 a3=0 items=0 ppid=216 pid=264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:firewalld_t:s0 key=(null)
>type=AVC msg=audit(1389666943.228:30): avc:  denied  { mmap_zero } for  pid=265 comm="ip6tables" scontext=system_u:system_r:firewalld_t:s0 tcontext=system_u:system_r:firewalld_t:s0 tclass=memprotect
>type=SYSCALL msg=audit(1389666943.228:30): arch=40000028 syscall=11 per=800000 success=no exit=-13 a0=1ca590 a1=1ca5a8 a2=1ca5f0 a3=0 items=0 ppid=216 pid=265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:firewalld_t:s0 key=(null)
>type=AVC msg=audit(1389666943.246:31): avc:  denied  { mmap_zero } for  pid=266 comm="ip6tables" scontext=system_u:system_r:firewalld_t:s0 tcontext=system_u:system_r:firewalld_t:s0 tclass=memprotect
>type=SYSCALL msg=audit(1389666943.246:31): arch=40000028 syscall=11 per=800000 success=no exit=-13 a0=1ca720 a1=1ca738 a2=1ca780 a3=0 items=0 ppid=216 pid=266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:firewalld_t:s0 key=(null)
>type=AVC msg=audit(1389666943.260:32): avc:  denied  { mmap_zero } for  pid=267 comm="ip6tables" scontext=system_u:system_r:firewalld_t:s0 tcontext=system_u:system_r:firewalld_t:s0 tclass=memprotect
>type=SYSCALL msg=audit(1389666943.260:32): arch=40000028 syscall=11 per=800000 success=no exit=-13 a0=1ca748 a1=1ca760 a2=1ca7c8 a3=0 items=0 ppid=216 pid=267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:firewalld_t:s0 key=(null)
>type=AVC msg=audit(1389666943.275:33): avc:  denied  { mmap_zero } for  pid=268 comm="ip6tables" scontext=system_u:system_r:firewalld_t:s0 tcontext=system_u:system_r:firewalld_t:s0 tclass=memprotect
>type=SYSCALL msg=audit(1389666943.275:33): arch=40000028 syscall=11 per=800000 success=no exit=-13 a0=1ca730 a1=1ca748 a2=1ca7a0 a3=0 items=0 ppid=216 pid=268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:firewalld_t:s0 key=(null)
>type=AVC msg=audit(1389666943.288:34): avc:  denied  { mmap_zero } for  pid=269 comm="ip6tables" scontext=system_u:system_r:firewalld_t:s0 tcontext=system_u:system_r:firewalld_t:s0 tclass=memprotect
>type=SYSCALL msg=audit(1389666943.288:34): arch=40000028 syscall=11 per=800000 success=no exit=-13 a0=1ca748 a1=1ca760 a2=1ca7b8 a3=0 items=0 ppid=216 pid=269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:firewalld_t:s0 key=(null)
>type=AVC msg=audit(1389666943.303:35): avc:  denied  { mmap_zero } for  pid=270 comm="ebtables" scontext=system_u:system_r:firewalld_t:s0 tcontext=system_u:system_r:firewalld_t:s0 tclass=memprotect
>type=SYSCALL msg=audit(1389666943.303:35): arch=40000028 syscall=11 per=800000 success=no exit=-13 a0=1c7550 a1=1c7568 a2=1c75d0 a3=0 items=0 ppid=216 pid=270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="ebtables" exe="/usr/sbin/ebtables" subj=system_u:system_r:firewalld_t:s0 key=(null)
>type=AVC msg=audit(1389666943.314:36): avc:  denied  { mmap_zero } for  pid=271 comm="ebtables" scontext=system_u:system_r:firewalld_t:s0 tcontext=system_u:system_r:firewalld_t:s0 tclass=memprotect
>type=SYSCALL msg=audit(1389666943.314:36): arch=40000028 syscall=11 per=800000 success=no exit=-13 a0=1c7818 a1=1c7830 a2=1c7898 a3=0 items=0 ppid=216 pid=271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="ebtables" exe="/usr/sbin/ebtables" subj=system_u:system_r:firewalld_t:s0 key=(null)
>type=AVC msg=audit(1389666943.328:37): avc:  denied  { mmap_zero } for  pid=272 comm="ebtables" scontext=system_u:system_r:firewalld_t:s0 tcontext=system_u:system_r:firewalld_t:s0 tclass=memprotect
>type=SYSCALL msg=audit(1389666943.328:37): arch=40000028 syscall=11 per=800000 success=no exit=-13 a0=1c7818 a1=1c7830 a2=1c7878 a3=0 items=0 ppid=216 pid=272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="ebtables" exe="/usr/sbin/ebtables" subj=system_u:system_r:firewalld_t:s0 key=(null)
>type=SERVICE_START msg=audit(1389666943.849:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="firewalld" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1389666945.752:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="firewalld" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666946.326:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="polkit" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666946.512:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="NetworkManager" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666946.660:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sshd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SYSTEM_BOOT msg=audit(1389666946.718:43): pid=295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='init exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success'
>type=SYSTEM_RUNLEVEL msg=audit(1389666946.730:44): pid=295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='old-level=N new-level=3 exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666946.739:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-update-utmp-runlevel" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1389666946.739:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-update-utmp-runlevel" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666946.873:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nfs-lock" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666950.971:48): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="NetworkManager-dispatcher" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=USER_AUTH msg=audit(1389666953.068:49): pid=237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=ttymxc0 res=success'
>type=USER_ACCT msg=audit(1389666953.083:50): pid=237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=ttymxc0 res=success'
>type=CRED_ACQ msg=audit(1389666953.084:51): pid=237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=ttymxc0 res=success'
>type=LOGIN msg=audit(1389666953.085:52): pid=237 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1 res=1
>type=USER_ROLE_CHANGE msg=audit(1389666953.560:53): pid=237 uid=0 auid=0 ses=1 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/bin/login" hostname=? addr=? terminal=ttymxc0 res=success'
>type=USER_START msg=audit(1389666953.705:54): pid=237 uid=0 auid=0 ses=1 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=ttymxc0 res=success'
>type=CRED_REFR msg=audit(1389666953.706:55): pid=237 uid=0 auid=0 ses=1 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=ttymxc0 res=success'
>type=USER_LOGIN msg=audit(1389666953.708:56): pid=237 uid=0 auid=0 ses=1 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/bin/login" hostname=? addr=? terminal=ttymxc0 res=success'
>type=USER_ACCT msg=audit(1389666953.761:57): pid=344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1389666953.779:58): pid=344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1389666954.103:59): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="user@0" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1389666962.986:60): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="NetworkManager-dispatcher" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1389666972.259:61): pid=371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=10:72:00:43:c9:ed:9d:7d:b1:52:b3:3d:b4:85:57:aa direction=? spid=371 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.15.10 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1389666972.260:62): pid=371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:f9:c2:ec:ca:66:11:0b:aa:90:70:cf:dc:41:44:f5 direction=? spid=371 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.15.10 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1389666972.266:63): pid=370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=371 suid=74 rport=51912 laddr=192. exe="/usr/sbin/sshd" hostname=? addr=192.168.15.10 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1389666972.267:64): pid=370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=371 suid=74 rport=51912 laddr=192. exe="/usr/sbin/sshd" hostname=? addr=192.168.15.10 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1389666972.307:65): pid=370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=371 suid=74 rport=51912 laddr=192.168.15.15 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.15.10 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1389666972.309:66): pid=370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=10:72:00:43:c9:ed:9d:7d:b1:52:b3:3d:b4:85:57:aa direction=? spid=370 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.15.10 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1389666972.310:67): pid=370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:f9:c2:ec:ca:66:11:0b:aa:90:70:cf:dc:41:44:f5 direction=? spid=370 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.15.10 terminal=? res=success'
>type=USER_LOGIN msg=audit(1389666972.310:68): pid=370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct=28756E6B6E6F776E207573657229 exe="/usr/sbin/sshd" hostname=? addr=192.168.15.10 terminal=ssh res=failed'
>type=CRYPTO_KEY_USER msg=audit(1389666976.474:69): pid=373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=10:72:00:43:c9:ed:9d:7d:b1:52:b3:3d:b4:85:57:aa direction=? spid=373 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.15.10 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1389666976.475:70): pid=373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:f9:c2:ec:ca:66:11:0b:aa:90:70:cf:dc:41:44:f5 direction=? spid=373 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.15.10 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1389666976.479:71): pid=372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=373 suid=74 rport=51913 laddr=192. exe="/usr/sbin/sshd" hostname=? addr=192.168.15.10 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1389666976.480:72): pid=372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=373 suid=74 rport=51913 laddr=192. exe="/usr/sbin/sshd" hostname=? addr=192.168.15.10 terminal=? res=success'
>type=SERVICE_START msg=audit(1389666976.706:73): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-readahead-done" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1389666976.706:74): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-readahead-done" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=USER_AUTH msg=audit(1389666980.017:75): pid=372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.15.10 terminal=ssh res=failed'
>type=USER_AUTH msg=audit(1389666986.521:76): pid=372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=his.montleon.intra addr=192.168.15.10 terminal=ssh res=failed'
>type=USER_AUTH msg=audit(1389666986.523:77): pid=372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.15.10 terminal=ssh res=failed'
>type=USER_AUTH msg=audit(1389666989.664:78): pid=372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=his.montleon.intra addr=192.168.15.10 terminal=ssh res=success'
>type=USER_ACCT msg=audit(1389666989.682:79): pid=372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=his.montleon.intra addr=192.168.15.10 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1389666989.684:80): pid=372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=373 suid=74 rport=51913 laddr=192.168.15.15 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.15.10 terminal=? res=success'
>type=USER_AUTH msg=audit(1389666989.689:81): pid=372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.15.10 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1389666989.691:82): pid=372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=his.montleon.intra addr=192.168.15.10 terminal=ssh res=success'
>type=LOGIN msg=audit(1389666989.692:83): pid=372 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2 res=1
>type=USER_ROLE_CHANGE msg=audit(1389666990.088:84): pid=372 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=his.montleon.intra addr=192.168.15.10 terminal=ssh res=success'
>type=USER_START msg=audit(1389666990.195:85): pid=372 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=his.montleon.intra addr=192.168.15.10 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1389666990.214:86): pid=372 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=his.montleon.intra addr=192.168.15.10 terminal=ssh res=success'
>type=USER_START msg=audit(1389666990.215:87): pid=372 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=his.montleon.intra addr=192.168.15.10 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1389666990.223:88): pid=380 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=10:72:00:43:c9:ed:9d:7d:b1:52:b3:3d:b4:85:57:aa direction=? spid=380 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.15.10 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1389666990.224:89): pid=380 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:f9:c2:ec:ca:66:11:0b:aa:90:70:cf:dc:41:44:f5 direction=? spid=380 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.15.10 terminal=? res=success'
>type=CRED_REFR msg=audit(1389666990.230:90): pid=380 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=his.montleon.intra addr=192.168.15.10 terminal=ssh res=success'

Actions: View

Attachments on bug 1052770: 849702